Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Gallery HIGH 10.0
CVE-2012-2405

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulner…

No fix yet
Fix from $1,950 2012-04-22
Weblog HIGH 7.5
CVE-2008-3318EPSS 8%

admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitra…

Fix: after 4.0
Fix from $1,950 2008-07-25
Links HIGH 7.5
CVE-2008-3319EPSS 8%

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrar…

Fix: after 3.1
Fix from $1,950 2008-07-25
Guestbook HIGH 7.5
CVE-2008-3320EPSS 7%

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbi…

Fix: after 3.2
Fix from $1,950 2008-07-25
Recipe HIGH 7.5
CVE-2008-3322EPSS 7%

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitra…

Fix: after 1.2
Fix from $1,950 2008-07-25
Search HIGH 7.5
CVE-2007-2077

PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path…

No fix yet
Fix from $1,950 2007-04-18
Gallery MEDIUM 6.8
CVE-2007-2076

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path…

No fix yet
Fix from $1,600 2007-04-18
Weblog MEDIUM 6.8
CVE-2007-2078

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_…

No fix yet
Fix from $1,600 2007-04-18
Support HIGH 7.5
CVE-2006-1259

Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass pa…

Mitigation only
Fix from $1,950 2006-03-19