Domphp - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2015-01-13.

Products

CVE-2014-10038 - CVSS 7.5 (high), 2015-01-13: SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter.
CVE-2014-10037 - CVSS 7.5 (high), 2015-01-13: Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to…
CVE-2008-6064 - CVSS 7.5 (high), 2009-02-05: Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and…
CVE-2008-0745 - CVSS 7.5 (high), 2008-02-13: Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in…
CVE-2008-0283 - CVSS 6.8 (medium), 2008-01-15: PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2008-0282 - CVSS 7.5 (high), 2008-01-15: SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail…