Vulnerabilities

TI-2009-00674 CVE-2009-0707 · GHSA-4m9h-7gmv-8qc2

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers…

LOW 37

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02047 Published 2009-02-23 No fix listed CWE-89

TI-2006-06459 CVE-2006-6715 · GHSA-j2xm-43r5-3fgc

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier…

LOW 29

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings[footer] paramete…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02997 Published 2006-12-23 No fix listed

TI-2006-01751 CVE-2006-1805 · GHSA-8573-8x6q-rfxx

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to…

LOW 36

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01397 Published 2006-04-18 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers…

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier…

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to…