Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2008-0391
- EPSS 2.2%
- Published 23.01.2008 02:00:00
- Last modified 09.04.2025 00:30:58
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.
6.8
CVE-2008-0371
- EPSS 1.11%
- Published 22.01.2008 20:00:00
- Last modified 09.04.2025 00:30:58
Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to exe...
1