W2b

14 CVEs across 8 W2b products. Browse W2b vulnerabilities, severities, and proof-of-concept exploits.

W2b products with known CVEs

ProductCVEs
Online Banking4
Phpdatingclub3
Phpgreetcards2
Dating Club1
Phpadboard1
Phpemployment1
Phpforumpro1
Phphotresources1
W2b CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-69212009-08-10Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable…
CVE-2008-69202009-08-10Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executabl…
CVE-2008-68492009-07-07Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an exec…
CVE-2008-68482009-07-07Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary web script or HTML via the category para…
CVE-2009-21792009-06-23SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter.
CVE-2009-21782009-06-23Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parame…
CVE-2008-31792008-07-15Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to include and execute arb…
CVE-2008-18932008-04-18PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang paramet…
CVE-2008-18442008-04-16SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter.
CVE-2008-18432008-04-16SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to paramete…
CVE-2007-31752007-06-11Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft parameter to mailer.w2b…
CVE-2007-31742007-06-11Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parame…
CVE-2006-19802006-04-21Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID…
CVE-2005-40882005-12-08SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.