Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2006-5827

Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username or (2) password parameters.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Phpcomasy
Products
Phpcomasy
CVE-2008-1164

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod_project_id parameter in a project_detail action.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phpcomasy
Products
Phpcomasy
CVE-2009-1023

SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Phpcomasy
Products
Phpcomasy
CVE-2005-3744

SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Phpcomasy
Products
Phpcomasy