Alex

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Alex records in CISA KEV

No Alex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Downloadengine 2 records MEDIUM News-engine 1 record LOW

Records

2 records in Downloadengine · all components

TI-2006-05104 CVE-2006-5291 · GHSA-cg2v-qgrr-gw86

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in…

MEDIUM 40

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04689 Published 2006-10-16 No fix listed CWE-94

TI-2006-05271 CVE-2006-5459 · GHSA-qmc5-93wf-hh65

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier…

LOW 35

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) $_ENGINE[eng_dir] and possibly (2) spaw_root parameters in…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01264 Published 2006-10-23 No fix listed

Open these records in search →

Critical	0
High	3
Medium	4
Low	1
No CVSS	0