Globalmegacorp

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Globalmegacorp records in CISA KEV

No Globalmegacorp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dvddb 3 records LOW Phpchain 2 records LOW

Records

5 records

TI-2007-00771 CVE-2007-0793 · GHSA-mvp8-cmc7-7ww6

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6…

LOW 36

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01426 Published 2007-02-06 No fix listed

TI-2007-00772 CVE-2007-0794 · GHSA-r3qr-j593-ccqw

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote…

LOW 35

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01161 Published 2007-02-06 No fix listed CWE-89

TI-2007-02415 CVE-2007-2499 · GHSA-h8pf-qhq6-5c94

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.ph…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01401 Published 2007-05-04 No fix listed

TI-2007-02580 CVE-2007-2669 · GHSA-6qm3-gv23-wcjv

Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01929 Published 2007-05-14 No fix listed

TI-2007-02581 CVE-2007-2670 · GHSA-2j3q-vc9h-xvcv

PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via…

LOW 23

PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-05-14 No fix listed

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0