Search vulnerabilities

Results 3

Export CSV
CVE-2008-2208

SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Products
CVE-2008-2209

Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script and (2) msg_script2 parameters.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Products
CVE-2008-7086

Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed
Products