Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hessam-x vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-5145
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote malicious users to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Olate Olatedownload 3.4.0
2 EDB exploits
9.3
CVSSv2
CVE-2007-1725
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges.
Icebb Icebb 1.0 Rc 5
2 EDB exploits
6.8
CVSSv2
CVE-2006-4708
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote malicious users to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.
Vikingboard Vikingboard 0.1b
2 EDB exploits
4
CVSSv2
CVE-2006-4418
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote malicious users to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file.
Wikepage Wikepage 2006.2
Wikepage Wikepage 2006.2a
1 EDB exploit
7.5
CVSSv2
CVE-2006-3304
SQL injection vulnerability in cp.php in DeluxeBB 1.07 and previous versions allows remote malicious users to execute arbitrary SQL commands via the xmsn parameter.
Deluxebb Deluxebb
1 EDB exploit
7.5
CVSSv2
CVE-2006-0628
myquiz.pl in Dale Ray MyQuiz 1.01 allows remote malicious users to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.
Dale Ray Myquiz 1.01
1 EDB exploit
7.5
CVSSv2
CVE-2006-4497
SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Iwebnegar Iwebnegar 1.1
1 EDB exploit
7.5
CVSSv2
CVE-2006-0206
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and previous versions allows remote malicious users to execute arbitrary PHP code via the date parameter in cal.php, which is included by index.php.
Light Weight Calendar Light Weight Calendar 1.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-7063
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and previous versions allows remote malicious users to include and execute arbitrary files via ".." sequences in the uname parameter.
Tinyphpforum Tinyphpforum
1 EDB exploit
5
CVSSv2
CVE-2006-4709
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote malicious users to execute arbitrary SQL commands via the s parameter.
Vikingboard Vikingboard 0.1b
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »