Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2008-2222
Disclosure Date: May 14, 2008 (last updated October 04, 2023)
SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id parameter.
0
Attacker Value
Unknown
CVE-2007-4176
Disclosure Date: August 08, 2007 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2007-3079
Disclosure Date: June 06, 2007 (last updated October 04, 2023)
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path.
0
Attacker Value
Unknown
CVE-2007-3077
Disclosure Date: June 06, 2007 (last updated October 04, 2023)
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter.
0
Attacker Value
Unknown
CVE-2007-2716
Disclosure Date: May 16, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-0760
Disclosure Date: February 06, 2007 (last updated October 04, 2023)
EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.
0
Attacker Value
Unknown
CVE-2006-2256
Disclosure Date: May 09, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkp_root_path parameter.
0
Attacker Value
Unknown
CVE-2005-2615
Disclosure Date: August 17, 2005 (last updated February 22, 2025)
Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id.
0
