Allomani

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Allomani records in CISA KEV

No Allomani vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Allomani Weblinks 2 records LOW Audio & Video Library 1 record LOW Mobile 1 record LOW Movies Library 1 record LOW

Records

5 records

TI-2014-07194 CVE-2014-8766 · GHSA-qqq7-fhg6-q4f9

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.ph…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02141 Published 2014-10-14 No fix listed CWE-89

TI-2009-04491 CVE-2009-4735 · GHSA-2hf2-xw27-m59v

SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips…

LOW 35

SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2010-03-18 No fix listed CWE-89

TI-2009-04490 CVE-2009-4734 · GHSA-xph7-589w-3m8h

SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips)…

LOW 35

SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2010-03-18 No fix listed CWE-89

TI-2009-03269 CVE-2009-3430 · GHSA-9g4q-3qcf-mvw9

SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers…

LOW 35

SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-09-25 No fix listed CWE-89

TI-2014-07058 CVE-2014-8593 · GHSA-3vh2-xgxr-xw99

Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default URI to admin.php or the (2) id parameter to admin.php or (3)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2014-11-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0