Show filters
21 Total Results
Displaying 1-10 of 21
Sort by:
Attacker Value
Unknown
CVE-2021-32172
Disclosure Date: October 07, 2021 (last updated February 23, 2025)
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
0
Attacker Value
Unknown
CVE-2014-10006
Disclosure Date: January 13, 2015 (last updated October 05, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.
0
Attacker Value
Unknown
CVE-2014-10005
Disclosure Date: January 13, 2015 (last updated October 05, 2023)
Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2014-10007
Disclosure Date: January 13, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.
0
Attacker Value
Unknown
CVE-2014-10004
Disclosure Date: January 13, 2015 (last updated October 05, 2023)
SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2008-7086
Disclosure Date: August 26, 2009 (last updated October 04, 2023)
Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.
0
Attacker Value
Unknown
CVE-2008-2206
Disclosure Date: May 14, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter in a search action to index.php, and the (2) msg_script parameter to admin/inc/footer.php.
0
Attacker Value
Unknown
CVE-2008-2212
Disclosure Date: May 14, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4, and unspecified other parameters to admin/inc/header.php; the (5) msg_script3 and unspecified other parameters to admin/inc/footer.php; and the (6) keywords parameter to index.php in a search action.
0
Attacker Value
Unknown
CVE-2008-2203
Disclosure Date: May 14, 2008 (last updated October 04, 2023)
SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action.
0
Attacker Value
Unknown
CVE-2008-2213
Disclosure Date: May 14, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters.
0
