Phpclanwebsite

Phpclanwebsite

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2008-5877

Exploit
  • EPSS 0.49%
  • Veröffentlicht 08.01.2009 19:30:11
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id paramet...

5.1

CVE-2008-5878

Exploit
  • EPSS 3.83%
  • Veröffentlicht 08.01.2009 19:30:11
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot...

4.3

CVE-2008-5879

Exploit
  • EPSS 3.64%
  • Veröffentlicht 08.01.2009 19:30:11
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors.

6.8

CVE-2006-0444

Exploit
  • EPSS 1.45%
  • Veröffentlicht 26.01.2006 22:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll ...

4

CVE-2006-0445

Exploit
  • EPSS 0.3%
  • Veröffentlicht 26.01.2006 22:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might ...

4.3

CVE-2006-0366

  • EPSS 0.76%
  • Veröffentlicht 22.01.2006 20:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag.