Vulnerabilities > Papoo > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-08-20 | CVE-2008-3724 | SQL Injection vulnerability in Papoo SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter. | 7.5 |
2007-06-27 | CVE-2007-3453 | SQL Injection vulnerability in Papoo SelmenuID Parameter SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components. | 7.5 |
2007-04-26 | CVE-2007-2320 | SQL Injection vulnerability in Papoo Kontakt.PHP SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478. | 7.5 |
2006-07-13 | CVE-2006-3572 | Input Validation vulnerability in Papoo SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter. | 7.5 |
2005-12-22 | CVE-2005-4478 | SQL Injection vulnerability in Papoo Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php. | 7.5 |