Vulnerabilities

TI-2019-15689 CVE-2019-25636 · GHSA-8gvj-hhcp-6pwh

Zeeways Jobsite CMS Lastest SQL Injection via id Parameter

HIGH 77

Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00333 Published 2026-03-24 No fix listed CWE-89

TI-2019-15688 CVE-2019-25635 · GHSA-cpv6-q3cr-686g

Zeeways Matrimony CMS Lastest SQL Injection via profile_list

HIGH 77

Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00333 Published 2026-03-24 No fix listed CWE-89

TI-2010-02056 CVE-2010-2144 · GHSA-4vgq-w9w2-q5g7

Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction…

LOW 26

Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03371 Published 2010-06-03 No fix listed CWE-79

TI-2009-04357 CVE-2009-4601 · GHSA-v32q-4mm3-923h

Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite…

LOW 23

Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web script or HTML via the title parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01641 Published 2010-01-12 No fix listed CWE-79

TI-2009-04079 CVE-2009-4316 · GHSA-vcw2-39v7-ppw9

Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows…

LOW 22

Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2009-12-14 No fix listed CWE-79

TI-2008-06603 CVE-2008-6915 · GHSA-v826-hfxj-8362

Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY…

LOW 23

Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2009-08-07 No fix listed CWE-79

TI-2008-06602 CVE-2008-6914 · GHSA-6fp4-vvfq-6vp3

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0…

LOW 34

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile mo…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03055 Published 2009-08-07 No fix listed CWE-264

TI-2008-06601 CVE-2008-6913 · GHSA-vf8g-xc3c-j27h

Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0…

LOW 35

Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03289 Published 2009-08-07 No fix listed CWE-20

TI-2008-06600 CVE-2008-6912 · GHSA-mfrq-67vr-mfx7

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain…

MEDIUM 43

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07412 Published 2009-08-07 No fix listed CWE-287

TI-2008-05488 CVE-2008-5782 · GHSA-p5rq-xwjq-jpjc

SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01018 Published 2008-12-31 No fix listed CWE-89

TI-2008-04795 CVE-2008-5042 · GHSA-8c6r-j443-2hfh

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication…

LOW 39

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03258 Published 2008-11-12 No fix listed CWE-287

TI-2008-04500 CVE-2008-4717 · GHSA-rjp9-585g-jjg5

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers…

LOW 35

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01037 Published 2008-10-23 No fix listed CWE-89

TI-2008-03548 CVE-2008-3706 · GHSA-r6r6-6fwh-w3v4

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers…

LOW 35

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01043 Published 2008-08-19 No fix listed CWE-89

Vulnerabilities

Filters