inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.
Export limit exceeded: 11764 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2007-1167
CVSS 2.0 · 5.0 Medium
EPSS 4.0%
KEV · Not listed
Vendors
Products
CVE-2010-0966
PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter.
CVSS 2.0 · 6.8 Medium
EPSS 2.4%
KEV · Not listed
Vendors
Products
CVE-2012-5000
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
CVSS 2.0 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.