Kwsphp

9 CVEs across 2 Kwsphp products. Browse Kwsphp vulnerabilities, severities, and proof-of-concept exploits.

Kwsphp products with known CVEs

ProductCVEs
Kwsphp9
Galerie Module1
Kwsphp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-62012009-02-20Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrar…
CVE-2008-61972009-02-20SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal para…
CVE-2008-17592008-04-12SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a…
CVE-2008-17582008-04-12SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.ph…
CVE-2008-17572008-04-12Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML…
CVE-2007-54852007-10-16SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
CVE-2007-49792007-09-19SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in…
CVE-2007-49562007-09-18Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) th…
CVE-2007-49222007-09-17SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id p…