Vulnerabilities > Globalmegacorp
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2007-05-14 | CVE-2007-2670 | Cross-Site Scripting vulnerability in PHPChain PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations. network globalmegacorp | 4.3 |
2007-05-14 | CVE-2007-2669 | Cross-Site Scripting vulnerability in PHPChain Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php. network globalmegacorp | 4.3 |
2007-05-04 | CVE-2007-2499 | Cross-Site Scripting vulnerability in DVDdb Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php. network globalmegacorp | 6.8 |
2007-02-06 | CVE-2007-0793 | Remote Security vulnerability in Globalmegacorp Dvddb 0.6 PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter. | 7.5 |