Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zoneo-soft vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-2926
Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the HTTP User-Agent header to index.php.
Zoneo-soft Phptraffica
NA
CVE-2014-8340
SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via a User-Agent HTTP header.
Zoneo-soft Phptraffica
NA
CVE-2008-3566
Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote malicious users to inject arbitrary web script or HTML via the acuparam parameter to (1) the default URI or (2) index.php, or (3) the PATH_INFO to index.php. NOTE: the provenance of this informatio...
Zoneo-soft Freeforum 1.7
1 EDB exploit
NA
CVE-2007-3647
The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and previous versions allows remote malicious users to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from thi...
Zoneo-soft Phptraffica 1.4.3
Zoneo-soft Phptraffica 1.4
Zoneo-soft Phptraffica 1.4.2
NA
CVE-2006-7209
Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA prior to 1.2beta2 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the (1) main, (2) daily, (3) weekly, (4) monthly, (5) new trends, (6) in...
Zoneo-soft Phptraffica
NA
CVE-2007-3425
Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2.
Zoneo-soft Phptraffica
1 EDB exploit
NA
CVE-2007-3426
Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the lang parameter.
Zoneo-soft Phptraffica
1 EDB exploit
NA
CVE-2007-3427
SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the pageid parameter in a stats action.
Zoneo-soft Phptraffica
1 EDB exploit
NA
CVE-2007-3428
Multiple unspecified vulnerabilities in phpTrafficA prior to 1.4.2 allow remote malicious users to have an unknown impact via the file parameter to (1) plotStatBar.php or (2) plotStatPie.php, different vectors than CVE-2007-1076.
Zoneo-soft Phptraffica
NA
CVE-2007-0487
PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote malicious users to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before b...
Zoneo-soft Freeforum 0.9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248
CVE-2024-3110
CVE-2024-5552
CVE-2024-29415
HTML injection
CVE-2024-3095
TCP
type confusion
CVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »