Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-7267

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2008-7268

The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2008-7269

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.

CVSS 2.0 · 5.8 Medium EPSS 8.2% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2010-4357

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Boka
Products
Siteengine