Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ajann vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2007-0049
Geckovich TaskTracker Pro 1.5 and previous versions allows remote malicious users to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.
Geckovich Tasktracker 1.4
Geckovich Tasktracker Pro
1 EDB exploit
7.5
CVSSv2
CVE-2007-0554
SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Guo Xu Guos Posting System Guo Xu Guos Posting System 1.2
1 EDB exploit
7.5
CVSSv2
CVE-2007-1696
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via the NewsPaperID parameter.
Active Web Softwares Active Newsletter
1 EDB exploit
6.8
CVSSv2
CVE-2007-1776
SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and previous versions component for Joomla! allows remote malicious users to execute arbitrary SQL commands via the article parameter in a read action.
Design For Joomla D4j Ezine
1 EDB exploit
7.5
CVSSv2
CVE-2006-5934
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via the UserName field.
Iexpress Estate Agent Manager 1.3
1 EDB exploit
6.8
CVSSv2
CVE-2006-6343
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Neocrome Seditio
1 EDB exploit
7.5
CVSSv2
CVE-2006-6559
SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote malicious users to execute arbitrary SQL commands via the PID parameter.
Lotfian Request For Travel 1.0
1 EDB exploit
7.5
CVSSv2
CVE-2005-3952
SQL injection vulnerability in PHP Labs Top Auction allows remote malicious users to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.
Php Labs Top Auction 1.0
1 EDB exploit
7.5
CVSSv2
CVE-2007-1616
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the recid parameter.
Scriptmagix Scriptmagix Lyrics
1 EDB exploit
7.5
CVSSv2
CVE-2007-1617
SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the catid parameter.
Scriptmagix Scriptmagix Recipes
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »