Browse CVEs

HIGH 7.5 CVE-2008-5199 PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP co… Ideabox No fix yet Fix from $1,9502008-11-21 HIGH 7.5 CVE-2006-3332 SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3… Zorum Mitigation only Fix from $1,9502006-06-30 HIGH 7.5 CVE-2006-0879 SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified at… Noahs Classifieds No fix yet Fix from $1,9502006-02-24 HIGH 7.5 CVE-2006-0881EPSS 8% Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote atta… Noahs Classifieds No fix yet Fix from $1,9502006-02-24 MEDIUM 5.0 CVE-2006-0878 Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/… Noahs Classifieds No fix yet Fix from $1,6002006-02-24 MEDIUM 5.0 CVE-2006-0882 Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemp… Noahs Classifieds No fix yet Fix from $1,6002006-02-24 HIGH 7.5 CVE-2005-4619 SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via … Zorum No fix yet Fix from $1,9502005-12-31 HIGH 7.5 CVE-2005-2979 SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rolli… Noahs Classifieds No fix yet Fix from $1,9502005-09-20 HIGH 7.5 CVE-2005-2651EPSS 5% gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. Zorum No fix yet Fix from $1,9502005-08-23 MEDIUM 5.0 CVE-2005-2652 Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.ph… Zorum No fix yet Fix from $1,6002005-08-23 HIGH 7.5 CVE-2005-0676 index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability. Zorum No fix yet Fix from $1,9502005-05-04 MEDIUM 5.0 CVE-2005-0677 index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter. Zorum No fix yet Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2003-1089 index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a P… Zorum No fix yet Fix from $1,6002003-12-31