Vulnerabilities > Globalmegacorp

DATE CVE VULNERABILITY TITLE RISK
2007-05-14 CVE-2007-2670 Cross-Site Scripting vulnerability in PHPChain
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.
network
globalmegacorp
4.3
2007-05-14 CVE-2007-2669 Cross-Site Scripting vulnerability in PHPChain
Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php.
network
globalmegacorp
4.3
2007-05-04 CVE-2007-2499 Cross-Site Scripting vulnerability in DVDdb
Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.
network
globalmegacorp
6.8
2007-02-06 CVE-2007-0793 Remote Security vulnerability in Globalmegacorp Dvddb 0.6
PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.
network
low complexity
globalmegacorp
7.5