Vulnerabilities

TI-2008-05894 CVE-2008-6201 · GHSA-pfp2-9h56-hppr

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as…

LOW 36

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03057 Published 2009-02-20 No fix listed CWE-22

TI-2008-01687 CVE-2008-1759 · GHSA-q672-5r92-fgcr

SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to…

LOW 35

SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-04-12 No fix listed CWE-89

TI-2008-01686 CVE-2008-1758 · GHSA-m98m-v26r-q3x5

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote…

LOW 35

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-04-12 No fix listed CWE-89

TI-2008-01685 CVE-2008-1757 · GHSA-7xxm-jvv2-rqhg

Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2008-04-12 No fix listed CWE-79

TI-2007-05271 CVE-2007-5485 · GHSA-p3h3-36m3-9p9g

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote…

LOW 35

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2007-10-16 No fix listed CWE-89

TI-2007-04800 CVE-2007-4979 · GHSA-26wg-qj4f-57xc

SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows…

LOW 35

SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2007-09-19 No fix listed CWE-89

TI-2007-04778 CVE-2007-4956 · GHSA-f8pg-vjq9-5m7p

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute…

LOW 39

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0353 Published 2007-09-18 No fix listed CWE-89

TI-2007-04744 CVE-2007-4922 · GHSA-8m7p-qrqg-xgvj

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows…

LOW 30

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00856 Published 2007-09-17 No fix listed CWE-89

Vulnerabilities

Filters