Particle Soft

10 CVEs across 4 Particle Soft products. Browse Particle Soft vulnerabilities, severities, and proof-of-concept exploits.

Particle Soft products with known CVEs

ProductCVEs
Particle Links4
Particle Gallery3
Particle Wiki2
Particle Whois1
Particle Soft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-30652007-06-06SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via…
CVE-2007-29622007-05-31Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via…
CVE-2006-29662006-06-12Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element w…
CVE-2006-29652006-06-12Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (1)…
CVE-2006-29052006-06-08Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php and (2) page_header.php, which displays…
CVE-2006-29042006-06-08SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.
CVE-2006-29032006-06-08Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username p…
CVE-2006-29022006-06-08Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE…
CVE-2006-28622006-06-06SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid pa…
CVE-2006-28612006-06-06SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.