Shamalli

6 CVEs across 1 Shamalli products. Browse Shamalli vulnerabilities, severities, and proof-of-concept exploits.

Shamalli products with known CVEs

ProductCVEs
Web Directory Free6
Shamalli CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-28142Critical9.32026-08-13Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.
CVE-2025-69018Medium6.52025-12-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows DOM…
CVE-2025-39567High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Ref…
CVE-2025-30908High7.12025-04-03Cross-Site Request Forgery (CSRF) vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from…
CVE-2025-28904Critical9.32025-03-25Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Bli…
CVE-2024-47379High7.12024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Ref…