Rezultati pretraživanja za 'Proizvođač: zoneo-soft'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2007-0487 | 7.5 | PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable | 2024-08-07 13:15:33 | 2007-01-25 00:28:00 |
| CVE-2006-0958 | 4.3 | Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters. | 2018-10-18 16:29:00 | 2006-03-02 23:02:00 |
| CVE-2006-0957 | 7.5 | Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php. | 2018-10-18 16:29:00 | 2006-03-02 23:02:00 |
| CVE-2006-5230 | 7.5 | PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. | 2018-10-17 21:41:00 | 2006-10-11 00:07:00 |
| CVE-2007-3427 | 7.5 | SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action. | 2018-10-16 16:49:00 | 2007-06-27 00:30:00 |
| CVE-2007-3426 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter. | 2018-10-16 16:49:00 | 2007-06-27 00:30:00 |
| CVE-2007-3425 | 5.0 | Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2. | 2018-10-16 16:49:00 | 2007-06-27 00:30:00 |
| CVE-2007-3647 | 10.0 | The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from | 2018-10-15 21:29:00 | 2007-07-10 17:30:00 |
| CVE-2015-2926 | 4.3 | Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header to index.php. | 2018-10-09 19:56:00 | 2015-04-14 14:59:00 |
| CVE-2014-8340 | 7.5 | SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header. | 2018-10-09 19:53:00 | 2014-12-16 18:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: