Kwsphp - vulnerabilities (CVEs)
9 CVEs in 2 products, 0 in the last 30 days, newest from 2009-02-20.
Products
- Kwsphp - 8 CVEs
- Galerie Module - 1 CVEs
Newest CVEs of Kwsphp
- CVE-2008-6201 - CVSS 6.8 (medium), 2009-02-20: Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute…
- CVE-2008-6197 - CVSS 7.5 (high), 2009-02-20: SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal…
- CVE-2008-1758 - CVSS 7.5 (high), 2008-04-12: SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to…
- CVE-2008-1757 - CVSS 4.3 (medium), 2008-04-12: Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or…
- CVE-2008-1759 - CVSS 7.5 (high), 2008-04-12: SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a…
- CVE-2007-5485 - CVSS 7.5 (high), 2007-10-16: SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
- CVE-2007-4979 - CVSS 7.5 (high), 2007-09-19: SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter…
- CVE-2007-4956 - CVSS 7.5 (high), 2007-09-18: Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2)…
- CVE-2007-4922 - CVSS 6.5 (medium), 2007-09-17: SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id…
