Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simo64 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-4978
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and previous versions allow remote malicious users to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
Walter Beschmout Phpquiz
1 EDB exploit
7.5
CVSSv2
CVE-2006-4921
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third part...
Siteatschool Siteatschool 2.4.02
Siteatschool Siteatschool
1 EDB exploit
7.5
CVSSv2
CVE-2006-4920
Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.i...
Siteatschool Siteatschool
1 EDB exploit
7.5
CVSSv2
CVE-2006-4114
SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the idsite parameter.
Phpmyring Phpmyring
1 EDB exploit
7.5
CVSSv2
CVE-2006-3884
Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote malicious users to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NO...
Gonafish Linkscaffe 3.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-3296
SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote malicious users to execute arbitrary SQL commands via the offset parameter.
George Currums Open Guestbook 0.5
1 EDB exploit
7.5
CVSSv2
CVE-2006-3309
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the forumid parameter.
Internet Scout Project Scout Portal Toolkit
1 EDB exploit
6.4
CVSSv2
CVE-2006-3194
Directory traversal vulnerability in index.php in singapore 0.10.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
Singapore Singapore 0.9.3 Beta
Singapore Singapore 0.9.4 Beta
Singapore Singapore 0.9.9b Beta
Singapore Singapore 0.9 Beta
Singapore Singapore 0.9a Beta
Singapore Singapore 0.9.11 Beta
Singapore Singapore 0.9.2 Beta
Singapore Singapore 0.9.8 Beta
Singapore Singapore 0.9.9a Beta
Singapore Singapore 0.10.0
Singapore Singapore 0.9.1 Beta
Singapore Singapore 0.9.5 Beta
Singapore Singapore 0.9.6 Beta
Singapore Singapore 0.9.10
Singapore Singapore 0.9.10 Beta
Singapore Singapore 0.9.7
Singapore Singapore 0.9.7 Beta
1 EDB exploit
5
CVSSv2
CVE-2006-4979
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and previous versions allows remote malicious users to inject arbitrary PHP code in config.inc.php via modified configuration settings.
Walter Beschmout Phpquiz
1 EDB exploit
5
CVSSv2
CVE-2006-4977
Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and previous versions allow remote malicious users to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_upda...
Walter Beschmout Phpquiz
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »