Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

l4teral vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-0267
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the...
Eticket Eticket 1.5.5.2
NA
CVE-2007-5684
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and previous versions allow remote malicious users to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) local_php parameters to (a) tiki-index.php, or (3) encoded "....
Tiki Tikiwiki Cms\\/groupware 1.9.4Tiki Tikiwiki Cms\\/groupware 1.9.2Tiki Tikiwiki Cms\\/groupware 1.9.8Tiki Tikiwiki Cms\\/groupware 1.9.7Tiki Tikiwiki Cms\\/groupware 1.9.6Tiki Tikiwiki Cms\\/groupware 1.9.5Tiki Tikiwiki Cms\\/groupware 1.9.0Tiki Tikiwiki Cms\\/groupware 1.9.3Tiki Tikiwiki Cms\\/groupware 1.9.1Tiki Tikiwiki Cms\\/groupware 1.6.1Tiki Tikiwiki Cms\\/groupware
NA
CVE-2008-0633
Buffer overflow in Anon Proxy Server 0.102 and previous versions, when user authentication is enabled, allows remote malicious users to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping.
Anon Proxy Server Anon Proxy Server
NA
CVE-2007-5983
Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script prior to 2.2.3 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
Justin Hagstrom Autoindex Php Script 2.0.2Justin Hagstrom Autoindex Php Script 2.0.3Justin Hagstrom Autoindex Php Script 2.2.0Justin Hagstrom Autoindex Php Script 2.2.1Justin Hagstrom Autoindex Php Script 2.0.6Justin Hagstrom Autoindex Php Script 2.0.7Justin Hagstrom Autoindex Php Script 2.0.4Justin Hagstrom Autoindex Php Script 2.0.5Justin Hagstrom Autoindex Php Script 2.2.2Justin Hagstrom Autoindex Php Script 2.0.0Justin Hagstrom Autoindex Php Script 2.0.1Justin Hagstrom Autoindex Php Script 2.1.0Justin Hagstrom Autoindex Php Script 2.1.1Justin Hagstrom Autoindex Php Script 2.1.2
NA
CVE-2008-5584
Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php.
Projectpier Projectpier
NA
CVE-2007-4976
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and previous versions allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.
Coppermine Coppermine Photo Gallery 1.4.10Coppermine Coppermine Photo Gallery 1.4.11Coppermine Coppermine Photo Gallery 1.4.12Coppermine Coppermine Photo Gallery 1.4.2Coppermine Coppermine Photo Gallery 1.4Coppermine Coppermine Photo Gallery 1.4.4Coppermine Coppermine Photo Gallery 1.4.9
NA
CVE-2007-5984
classes/Url.php in Justin Hagstrom AutoIndex PHP Script prior to 2.2.4 allows remote malicious users to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."
Justin Hagstrom Autoindex Php Script 2.0.4Justin Hagstrom Autoindex Php Script 2.0.5Justin Hagstrom Autoindex Php Script 2.2.1Justin Hagstrom Autoindex Php Script 2.2.2Justin Hagstrom Autoindex Php Script 2.0.0Justin Hagstrom Autoindex Php Script 2.0.1Justin Hagstrom Autoindex Php Script 2.1.0Justin Hagstrom Autoindex Php Script 2.1.1Justin Hagstrom Autoindex Php Script 2.0.6Justin Hagstrom Autoindex Php Script 2.0.7Justin Hagstrom Autoindex Php Script 2.2.3Justin Hagstrom Autoindex Php Script 2.0.2Justin Hagstrom Autoindex Php Script 2.0.3Justin Hagstrom Autoindex Php Script 2.1.2Justin Hagstrom Autoindex Php Script 2.2.0
NA
CVE-2007-4977
Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the referer parameter.
Coppermine Coppermine Photo Gallery 1.4.10Coppermine Coppermine Photo Gallery 1.4.11Coppermine Coppermine Photo Gallery 1.4.12Coppermine Coppermine Photo Gallery 1.4.2Coppermine Coppermine Photo Gallery 1.4Coppermine Coppermine Photo Gallery 1.4.4Coppermine Coppermine Photo Gallery 1.4.9
NA
CVE-2008-0266
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote malicious users to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separa...
Eticket Eticket 1.5.5.2
NA
CVE-2008-0268
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Eticket Eticket 1.5.5.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook