Vulnerabilities > Papoo > High

DATE CVE VULNERABILITY TITLE RISK
2008-08-20 CVE-2008-3724 SQL Injection vulnerability in Papoo
SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter.
network
low complexity
papoo CWE-89
7.5
2007-06-27 CVE-2007-3453 SQL Injection vulnerability in Papoo SelmenuID Parameter
SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components.
network
low complexity
papoo
7.5
2007-04-26 CVE-2007-2320 SQL Injection vulnerability in Papoo Kontakt.PHP
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478.
network
low complexity
papoo
7.5
2006-07-13 CVE-2006-3572 Input Validation vulnerability in Papoo
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
network
low complexity
papoo
7.5
2005-12-22 CVE-2005-4478 SQL Injection vulnerability in Papoo
Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php.
network
low complexity
papoo CWE-89
7.5