Vulnerabilities

TI-2008-04565 CVE-2008-4782 · GHSA-764q-366q-xcv8

SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control…

LOW 35

SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01008 Published 2008-10-29 No fix listed CWE-89

TI-2007-03018 CVE-2007-3120 · GHSA-h2cw-8x87-xw5g

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One…

LOW 23

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-06-07 No fix listed

TI-2007-02537 CVE-2007-2625 · GHSA-49px-c282-f5wm

Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In…

LOW 32

Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01134 Published 2007-05-11 No fix listed

TI-2007-02536 CVE-2007-2624 · GHSA-88h9-7hmj-878q

Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One…

LOW 33

Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01356 Published 2007-05-11 No fix listed

TI-2006-05616 CVE-2006-5832 · GHSA-r73v-34jr-349h

All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain…

LOW 28

All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to (1) public/code/cp_dpage.php, possibly involving the aiocp_dp[] parameter, (2…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03089 Published 2006-11-10 No fix listed

TI-2006-05615 CVE-2006-5831 · GHSA-qhqj-hgxw-xvrw

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control…

LOW 38

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the load_page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02835 Published 2006-11-10 No fix listed

TI-2006-05614 CVE-2006-5830 · GHSA-7r93-9v78-ccf2

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP)…

LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parame…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02387 Published 2006-11-10 No fix listed

TI-2006-05613 CVE-2006-5829 · GHSA-wpcp-vg3v-r8qr

Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and…

LOW 32

Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) choosed_language parameter to (a) cp_dpage.php, (b) cp_n…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01174 Published 2006-11-10 No fix listed CWE-89

Vulnerabilities

Filters