Smartisoft - vulnerabilities (CVEs)
9 CVEs in 2 products, 0 in the last 30 days, newest from 2010-06-17.
Products
- Phpbazar - 6 CVEs
- Phplistpro - 3 CVEs
Newest CVEs of Smartisoft
- CVE-2010-2315 - CVSS 7.5 (high), 2010-06-17: PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the…
- CVE-2009-4221 - CVSS 7.5 (high), 2009-12-07: SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid…
- CVE-2009-4222 - CVSS 7.5 (high), 2009-12-07: phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin…
- CVE-2008-3767 - CVSS 7.5 (high), 2008-08-22: SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
- CVE-2006-2527 - CVSS 7.5 (high), 2006-05-22: Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative…
- CVE-2006-2523 - CVSS 7.5 (high), 2006-05-22: PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute…
- CVE-2006-2528 - CVSS 6.4 (medium), 2006-05-22: PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL…
- CVE-2006-2323 - CVSS 5.1 (medium), 2006-05-12: Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in…
- CVE-2006-1749 - CVSS 7.5 (high), 2006-04-12: PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath…
