Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2008-6296

Disclosure Date: February 26, 2009 (last updated October 04, 2023)
admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting the user cookie to "demo."
0
0
Attacker Value
Unknown

CVE-2008-4880

Disclosure Date: November 04, 2008 (last updated October 04, 2023)
SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879.
0
0
Attacker Value
Unknown

CVE-2008-4879

Disclosure Date: November 04, 2008 (last updated October 04, 2023)
SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880.
0
0
Attacker Value
Unknown

CVE-2007-3198

Disclosure Date: June 12, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.
0
0
Attacker Value
Unknown

CVE-2007-2182

Disclosure Date: April 24, 2007 (last updated October 04, 2023)
Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter.
0
0