الباحثون
رجوع
3Spi0N
باحث من
RevolutionSec.Com - GraySecure.Org
#12004
من 60,574
26.8
إجمالي CVSS
الثغرات
·
4
متوسطة
1
عالية
3
PT-2013-5471
2013-08-19
7.5
CVE-2013-5311
Vastal I Tech
Phpvid
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `n` parameter to either "browse videos.php" or "members.php" API endpoints.
PT-2013-5472
2013-08-19
4.3
CVE-2013-5312
Phpvid
Phpvid
The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the `n` parameter to "browse videos.php" or the `cat` parameter to "groups.php".
PT-2013-1988
2013-01-31
7.5
CVE-2012-6524
Pgb
Pgb
A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in the kommentar.php file.
PT-2013-1989
2013-01-31
7.5
CVE-2012-6525
Phpbridges
Phpbridges
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the members.php file.