Ajsquare
16 CVEs across 8 Ajsquare products. Browse Ajsquare vulnerabilities, severities, and proof-of-concept exploits.
Ajsquare products with known CVEs
Ajsquare CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2015-2182 | | | 2015-03-11 | Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in… |
CVE-2010-5322 | | | 2015-03-11 | Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in… |
CVE-2015-2184 | | | 2015-03-10 | ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function. |
CVE-2009-4989 | | | 2010-08-25 | Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or HTML via the txtkeyw… |
CVE-2010-2917 | | | 2010-07-30 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via… |
CVE-2010-2916 | | | 2010-07-30 | SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2010-2915 | | | 2010-07-30 | SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2010-1876 | | | 2010-05-12 | SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a sho… |
CVE-2009-3203 | | | 2009-09-16 | SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2008-7051 | | | 2009-08-24 | AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles… |
CVE-2008-7046 | | | 2009-08-24 | AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php… |
CVE-2008-7045 | | | 2009-08-24 | AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/res… |
CVE-2008-7044 | | | 2009-08-24 | SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to execute arbitrar… |
CVE-2008-7041 | | | 2009-08-24 | AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php. |
CVE-2009-2779 | | | 2009-08-17 | SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail act… |
CVE-2008-6721 | | | 2009-04-14 | SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter (aka the u… |