Export limit exceeded: 425829 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 21745 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2009-1487

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Rens Rikkerink
Products
Fungamez
CVE-2009-1488

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Rens Rikkerink
Products
Fungamez
CVE-2009-1489

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Rens Rikkerink
Products
Fungamez