China-On-Site

9 CVEs across 6 China-On-Site products. Browse China-On-Site vulnerabilities, severities, and proof-of-concept exploits.

China-On-Site products with known CVEs

ProductCVEs
Flexphpdirectory2
Flexphplink2
Flexphpnews2
Flexcustomer0.0.61
Flexphpic1
Flexphpsite1
China-On-Site CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-67612009-04-28Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via…
CVE-2008-67502009-04-24Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary code by uploading a file with an execu…
CVE-2008-67492009-04-24Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute a…
CVE-2008-67312009-04-20Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file wit…
CVE-2008-67302009-04-20Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to…
CVE-2008-62412009-02-23Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to exec…
CVE-2008-61422009-02-16Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.x versions, allow remote attackers to e…
CVE-2008-59272009-01-21Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands via the (1) checkus…
CVE-2005-12372005-05-02SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.