Eqdkp

9 CVEs across 3 Eqdkp products. Browse Eqdkp vulnerabilities, severities, and proof-of-concept exploits.

Eqdkp products with known CVEs

ProductCVEs
Eqdkp7
Attunement And Key1
Eqdkp Plus1
Eqdkp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-22222008-05-14SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id parameter.
CVE-2007-41762007-08-08Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.
CVE-2007-30792007-06-06listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path.
CVE-2007-30772007-06-06SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter.
CVE-2007-30672007-06-06Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web sc…
CVE-2007-27162007-05-16Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show para…
CVE-2007-07602007-02-06EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers…
CVE-2006-22562006-05-09PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2005-26152005-08-17Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id.