Alexscriptengine - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2007-04-26.

Products

• Download-engine - 2 CVEs
• Picture-engine - 1 CVEs

Newest CVEs of Alexscriptengine

• CVE-2007-2289 - CVSS 7.5 (high), 2007-04-26: PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated…
• CVE-2007-2255 - CVSS 7.5 (high), 2007-04-25: Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir…
• CVE-2007-1791 - CVSS 7.5 (high), 2007-03-31: SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.