Vulnerabilities > Verliadmin
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-07-22 | CVE-2009-2571 | Cross-Site Scripting vulnerability in Verliadmin 0.3.7/0.3.8 Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a bantest action. | 4.3 |
| 2007-01-05 | CVE-2007-0098 | File-Upload vulnerability in VerliAdmin Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. network verliadmin | 6.8 |
| 2006-12-20 | CVE-2006-6668 | Cross-Site Scripting vulnerability in VerliAdmin Cross-site scripting (XSS) vulnerability in VerliAdmin 0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network verliadmin | 6.8 |
| 2006-12-20 | CVE-2006-6667 | SQL-Injection vulnerability in VerliAdmin Multiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nick_mod or (2) nick parameter to (a) repass.php or (b) verify.php. | 7.5 |
| 2006-12-20 | CVE-2006-6666 | Remote File Include vulnerability in VerliAdmin PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter. | 7.5 |