Vulnerabilities > Phpclanwebsite

DATE CVE VULNERABILITY TITLE RISK
2009-01-08 CVE-2008-5879 Cross-Site Scripting vulnerability in PHPclanwebsite
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors.
4.3
2009-01-08 CVE-2008-5878 Path Traversal vulnerability in PHPclanwebsite
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a ..
network
high complexity
phpclanwebsite CWE-22
5.1
2009-01-08 CVE-2008-5877 SQL Injection vulnerability in PHPclanwebsite
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id parameter to pcw/processforms.php, (3) pcwlogin and (4) pcw_pass parameters to pcw/setlogin.php, (5) searchvalue parameter to pcw/downloads.php, and the (6) searchvalue and (7) whichfield parameter to pcw/downloads.php, a different vector than CVE-2006-0444.
6.8
2006-01-26 CVE-2006-0445 Input Validation vulnerability in PHPclanwebsite 1.23.1
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php.
network
low complexity
phpclanwebsite
4.0
2006-01-26 CVE-2006-0444 Input Validation vulnerability in PHPclanwebsite 1.23.1
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page.
network
phpclanwebsite
6.8
2006-01-22 CVE-2006-0366 Unspecified vulnerability in PHPclanwebsite 1.23.1
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag.
network
phpclanwebsite
4.3