Maian

10 CVEs across 7 Maian products. Browse Maian vulnerabilities, severities, and proof-of-concept exploits.

Maian products with known CVEs

ProductCVEs
Gallery3
Weblog2
Guestbook1
Links1
Recipe1
Search1
Support1
Maian CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-24052012-04-22Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability th…
CVE-2012-11132012-04-22Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inje…
CVE-2008-33222008-07-25admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_…
CVE-2008-33202008-07-25admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gboo…
CVE-2008-33192008-07-25admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_co…
CVE-2008-33182008-07-25admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_…
CVE-2007-20782007-04-18PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder…
CVE-2007-20772007-04-18PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder…
CVE-2007-20762007-04-18PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder…
CVE-2006-12592006-03-19Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to…