Browse CVEs

CRITICAL 9.8 CVE-2021-32172EPSS 66% Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin. Maian Cart No fix yet Fix from $2,3002021-10-07 MEDIUM 6.8 CVE-2014-10006 Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified u… Maian Uploader No fix yet Fix from $1,6002015-01-13 MEDIUM 5.0 CVE-2014-10005 Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which revea… Maian Uploader No fix yet Fix from $1,6002015-01-13 HIGH 7.5 CVE-2014-10004 SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id p… Maian Uploader No fix yet Fix from $1,9502015-01-13 HIGH 7.5 CVE-2008-7086EPSS 7% Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to … Maian Greetings No fix yet Fix from $1,9502009-08-26 HIGH 7.5 CVE-2008-2203 SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in… Maian Search Mitigation only Fix from $1,9502008-05-14 HIGH 7.5 CVE-2008-2205 SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an a… Maian Music Mitigation only Fix from $1,9502008-05-14 HIGH 7.5 CVE-2008-2208 SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter i… Maian Greeting Mitigation only Fix from $1,9502008-05-14