Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
condemned vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-6330
SQL injection vulnerability in index.php in MyTopix 1.3.0 and previous versions allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action.
Jaia Interactive Mytopix
Jaia Interactive Mytopix 1.2.3
1 EDB exploit
NA
CVE-2008-4913
Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and previous versions allows remote malicious users to delete arbitrary files via a .. (dot dot) in the delete parameter.
Lokicms Lokicms 0.1.0
Lokicms Lokicms
Lokicms Lokicms 0.3.2b1
Lokicms Lokicms 0.3.1b2
Lokicms Lokicms 0.2.0
Lokicms Lokicms 0.1.0rc1
Lokicms Lokicms 0.3.1b1
Lokicms Lokicms 0.3.0
1 EDB exploit
NA
CVE-2008-2477
SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote malicious users to execute arbitrary SQL commands via the page parameter.
Mx-system Mxbb Portal 2.7.3
1 EDB exploit
NA
CVE-2008-2129
SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the cat parameter.
Cine Galleristic 1.0
1 EDB exploit
NA
CVE-2008-2337
Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot parameter to (b) popup/koment.php and (c) popup/opis.p...
Imgallery Imgallery 2.5
1 EDB exploit
NA
CVE-2008-7062
Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads...
Lovecms Lovecms 1.6.2
1 EDB exploit
NA
CVE-2008-5794
Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote malicious users to delete arbitrary files via a .. (dot dot) in the delete parameter.
Lovecms Lovecms 1.6.2
1 EDB exploit
NA
CVE-2008-3588
Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote malicious users to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php.
Phsblog Phsblog 0.1.1
1 EDB exploit
NA
CVE-2009-4426
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the blog parameter to (1) comment.php and (2) view.php.
Launchpad Ignition 1.2
1 EDB exploit
NA
CVE-2009-1853
Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action.
Kenseiboard Kensei Board 1.1.0
Kenseiboard Kensei Board
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »