Prozilla - vulnerabilities (CVEs)
15 CVEs in 12 products, 0 in the last 30 days, newest from 2009-02-11.
Products
- Prozilla Download Accelerator - 3 CVEs
- Hosting Index - 2 CVEs
- Cheats - 1 CVEs
- Entertainers - 1 CVEs
- Forum - 1 CVEs
- Prozilla Directory Script - 1 CVEs
- Prozilla Freelancers - 1 CVEs
- Prozilla Pub Site Directory - 1 CVEs
- Reviews - 1 CVEs
- Top 100 - 1 CVEs
- Topsites - 1 CVEs
- Webring - 1 CVEs
Newest CVEs of Prozilla
- CVE-2008-6115 - CVSS 7.5 (high), 2009-02-11: SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
- CVE-2008-2083 - CVSS 6.8 (medium), 2008-05-05: SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL…
- CVE-2008-1863 - CVSS 7.5 (high), 2008-04-17: SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to execute arbitrary SQL commands via the id…
- CVE-2008-1864 - CVSS 7.5 (high), 2008-04-17: SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project parameter.
- CVE-2008-1789 - CVSS 6.8 (medium), 2008-04-15: SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.
- CVE-2008-1788 - CVSS 7.5 (high), 2008-04-15: SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat…
- CVE-2008-1784 - CVSS 7.5 (high), 2008-04-15: Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in…
- CVE-2008-1785 - CVSS 5.5 (medium), 2008-04-15: delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter.
- CVE-2008-1783 - CVSS 6.4 (medium), 2008-04-15: Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php.
- CVE-2007-4362 - CVSS 6.8 (medium), 2007-08-15: SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter.
- CVE-2007-4258 - CVSS 7.5 (high), 2007-08-08: SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter.
- CVE-2007-3809 - CVSS 7.5 (high), 2007-07-17: Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a…
- CVE-2005-2961 - CVSS 7.5 (high), 2005-10-05: Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to…
- CVE-2005-0523 - CVSS 7.5 (high), 2005-05-02: Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location…
- CVE-2004-1120 - CVSS 10 (critical), 2005-01-10: Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow…
