Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

s3rv3r_hack3r vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-4884
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote malicious users to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_tit...
Idevspot Isupport 1.8
NA
CVE-2006-4747
Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote malicious users to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php.
Idevspot Textads
NA
CVE-2006-1586
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote malicious users to execute arbitrary SQL commands via the pass parameter.
Internet Solutions Professionals Site Man
NA
CVE-2006-4742
Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote malicious users to inject arbitrary web script or HTML via the msg parameter.
Idevspot Phplinkexchange 1.0
NA
CVE-2007-0890
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the password parameter.
Cpanel Webhost Manager 11Cpanel Webhost Manager 11.0Cpanel Webhost Manager 6.4.1Cpanel Webhost Manager 6.4.2Cpanel Webhost Manager 9.4.1 R64Cpanel Webhost Manager 9.9.1 R3Cpanel Webhost Manager 10.6.0 R137Cpanel Webhost Manager 10.8.1 113Cpanel Webhost Manager 10.8.1 Build84Cpanel Webhost Manager 5.3Cpanel Webhost Manager 6.0Cpanel Webhost Manager 8.0Cpanel Webhost Manager 9.0Cpanel Webhost Manager 10.8.2 118Cpanel Webhost Manager 10.9Cpanel Webhost Manager 6.2Cpanel Webhost Manager 6.4Cpanel Webhost Manager 9.1Cpanel Webhost Manager 9.1.0 R85Cpanel Webhost Manager 10.2.0 R82Cpanel Webhost Manager 11 BetaCpanel Webhost Manager 5.0
NA
CVE-2006-4894
Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the error parameter.
Idevspot Nixieaffiliate
NA
CVE-2006-4741
PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote malicious users to execute arbitrary code via the svr_rootPhpStart parameter.
Idevspot Phplinkexchange 1.0
NA
CVE-2007-2474
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote malicious users to execute arbitrary PHP code via a URL in the abs_path parameter to (1) include/payment/payflow_pro.php, (2) global.php, or (3) libsecure.php, different...
Turnkey Web Tools Sunshop Shopping Cart
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook