Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ajann vulnerabilities and exploits
(subscribe to this query)
765
VMScore
CVE-2005-0725
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote malicious users to execute arbitrary SQL commands via the articleid parameter to article.php.
Wf-sections Wf-sections 1.07
3 EDB exploits
765
VMScore
CVE-2007-1974
SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and previous versions, and possibly other modules, allows remote malicious user...
Wf-sections Wf-sections 1.0.1
Xoops Zmagazine Module 1.0
Xoops Happy Linux Xfsection Module
3 EDB exploits
510
VMScore
CVE-2007-0620
download.php in FD Script 1.3.2 and previous versions allows remote malicious users to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php.
Vlad Leont Fd Script 1.3.2
Vlad Leont Fd Script 1.3
Vlad Leont Fd Script 1.3.1
2 EDB exploits
760
VMScore
CVE-2009-0427
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the cid parameter.
Dmxready Member Directory Manager 1.1
2 EDB exploits
760
VMScore
CVE-2009-0428
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the cid parameter.
Dmxready Secure Document Library
Dmxready Secure Document Library 1.0
2 EDB exploits
755
VMScore
CVE-2006-2847
SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote malicious users to execute arbitrary SQL commands via the linkID parameter.
Full Revolution Aspweblinks 2.0
1 EDB exploit
755
VMScore
CVE-2006-3176
SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Xaran Xaran Cms 2.0
1 EDB exploit
755
VMScore
CVE-2006-5641
SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote malicious users to execute arbitrary SQL commands via the key parameter.
Techno Dreams Announcement Script
1 EDB exploit
755
VMScore
CVE-2006-5666
SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote malicious users to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information.
Asmir Alic E Annu 1.0
1 EDB exploit
755
VMScore
CVE-2007-2737
SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote malicious users to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...
Xoops Myconference Module 1.0
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »