Vulnerabilities

TI-2009-00674 CVE-2009-0707 · GHSA-4m9h-7gmv-8qc2

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers…

LOW 37

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02047 Published 2009-02-23 No fix listed CWE-89

TI-2009-00672 CVE-2009-0705 · GHSA-8cmf-vm53-gmwg

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when…

LOW 32

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00962 Published 2009-02-23 No fix listed CWE-89

TI-2008-01471 CVE-2008-1537 · GHSA-pvw5-f3qv-rx86

Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts…

LOW 35

Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02877 Published 2008-03-28 No fix listed CWE-22

TI-2008-01468 CVE-2008-1534 · GHSA-chpr-g3x2-5jgv

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote…

LOW 38

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02996 Published 2008-03-28 No fix listed CWE-22

TI-2008-00708 CVE-2008-0742 · GHSA-rwf6-mxf8-5hcf

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02286 Published 2008-02-13 No fix listed CWE-22

TI-2006-06459 CVE-2006-6715 · GHSA-j2xm-43r5-3fgc

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier…

LOW 29

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings[footer] paramete…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02997 Published 2006-12-23 No fix listed

TI-2006-01751 CVE-2006-1805 · GHSA-8573-8x6q-rfxx

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to…

LOW 36

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01397 Published 2006-04-18 No fix listed

TI-2000-00074 CVE-2000-0074 · GHSA-3p8m-qpqj-m94w

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a…

MEDIUM 45

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0978 Published 2000-02-04 No fix listed

Vulnerabilities

Filters