CVE-2014-10038
- EPSS 2.35%
- Veröffentlicht 13.01.2015 15:59:48
- Zuletzt bearbeitet 06.05.2026 22:30:45
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter.
CVE-2014-10037
- EPSS 19.39%
- Veröffentlicht 13.01.2015 15:59:47
- Zuletzt bearbeitet 06.05.2026 22:30:45
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.
CVE-2008-6064
- EPSS 0.93%
- Veröffentlicht 05.02.2009 01:30:00
- Zuletzt bearbeitet 16.06.2026 23:01:30
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors.
CVE-2008-0745
- EPSS 2.25%
- Veröffentlicht 13.02.2008 20:00:00
- Zuletzt bearbeitet 16.06.2026 22:50:16
Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
CVE-2008-0282
- EPSS 0.97%
- Veröffentlicht 15.01.2008 21:00:00
- Zuletzt bearbeitet 16.06.2026 22:49:18
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter.
CVE-2008-0283
- EPSS 1.83%
- Veröffentlicht 15.01.2008 21:00:00
- Zuletzt bearbeitet 16.06.2026 22:49:19
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.