Phpoutsourcing - vulnerabilities (CVEs)

23 CVEs in 3 products, 0 in the last 30 days, newest from 2008-11-21.

Products

• Zorum - 12 CVEs
• Noahs Classifieds - 10 CVEs
• Ideabox - 1 CVEs

Newest CVEs of Phpoutsourcing

• CVE-2008-5199 - CVSS 7.5 (high), 2008-11-21: PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a…
• CVE-2006-5431 - CVSS 7.5 (high), 2006-10-20: PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code…
• CVE-2006-5293 - CVSS 6.8 (medium), 2006-10-16: Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web…
• CVE-2006-3333 - CVSS 2.6 (low), 2006-06-30: Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified…
• CVE-2006-3332 - CVSS 7.5 (high), 2006-06-30: SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid,…
• CVE-2006-1331 - CVSS 6.8 (medium), 2006-03-21: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script…
• CVE-2006-1332 - CVSS 6.4 (medium), 2006-03-21: Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to…
• CVE-2006-0880 - CVSS 4.3 (medium), 2006-02-24: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-0879 - CVSS 7.5 (high), 2006-02-24: SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack…
• CVE-2006-0882 - CVSS 5 (medium), 2006-02-24: Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate…
• CVE-2006-0878 - CVSS 5 (medium), 2006-02-24: Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by…
• CVE-2006-0881 - CVSS 7.5 (high), 2006-02-24: Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to…
• CVE-2005-4619 - CVSS 7.5 (high), 2005-12-31: SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2005-2979 - CVSS 7.5 (high), 2005-09-20: SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid…
• CVE-2005-2980 - CVSS 4.3 (medium), 2005-09-20: Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2005-2651 - CVSS 7.5 (high), 2005-08-23: gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.
• CVE-2005-2652 - CVSS 5 (medium), 2005-08-23: Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4)…
• CVE-2005-0676 - CVSS 7.5 (high), 2005-05-04: index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
• CVE-2005-0675 - CVSS 4.3 (medium), 2005-05-02: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2)…
• CVE-2005-0677 - CVSS 5 (medium), 2005-05-02: index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
• CVE-2003-1089 - CVSS 5 (medium), 2003-12-31: index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error…
• CVE-2003-1088 - CVSS 4.3 (medium), 2003-08-11: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method…
• CVE-2002-2350 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web…