Phpclanwebsite - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2009-01-08.

Products

CVE-2008-5879 - CVSS 4.3 (medium), 2009-01-08: Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary…
CVE-2008-5878 - CVSS 5.1 (medium), 2009-01-08: Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals…
CVE-2008-5877 - CVSS 6.8 (medium), 2009-01-08: Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to…
CVE-2006-0445 - CVSS 4 (medium), 2006-01-26: index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page,…
CVE-2006-0444 - CVSS 6.8 (medium), 2006-01-26: SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par…
CVE-2006-0366 - CVSS 4.3 (medium), 2006-01-22: Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a…