Aiocp

Aiocp

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-4782

  • EPSS 0.16%
  • Veröffentlicht 29.10.2008 14:22:38
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.

4.3

CVE-2007-3120

  • EPSS 0.51%
  • Veröffentlicht 07.06.2007 21:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtain...

6.8

CVE-2007-2624

  • EPSS 1.04%
  • Veröffentlicht 11.05.2007 17:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the SERVER superglobal array. NO...

6.8

CVE-2007-2625

  • EPSS 0.49%
  • Veröffentlicht 11.05.2007 17:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details ar...

6.8

CVE-2006-5829

Exploit
  • EPSS 1.38%
  • Veröffentlicht 10.11.2006 01:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) choosed_language parameter to (a) cp_dpage.php, (b) cp_news.php, (c) cp_forum_view.php...

6.8

CVE-2006-5830

Exploit
  • EPSS 2.64%
  • Veröffentlicht 10.11.2006 01:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php...

7.5

CVE-2006-5831

Exploit
  • EPSS 2.73%
  • Veröffentlicht 10.11.2006 01:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the load_page parameter.

5

CVE-2006-5832

Exploit
  • EPSS 6.74%
  • Veröffentlicht 10.11.2006 01:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to (1) public/code/cp_dpage.php, possibly involving the aiocp_dp[] parameter, (2) public/code/cp_show_ec_produ...