Zoneo-Soft

13 CVEs across 2 Zoneo-Soft products. Browse Zoneo-Soft vulnerabilities, severities, and proof-of-concept exploits.

Zoneo-Soft products with known CVEs

ProductCVEs
Phptraffica8
Freeforum5
Zoneo-Soft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2015-29262015-04-14Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script…
CVE-2014-83402014-12-16SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a Us…
CVE-2008-35662008-08-10Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter…
CVE-2007-36472007-07-10The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access…
CVE-2007-34282007-06-27Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to (1) plotStatBar.php…
CVE-2007-34272007-06-27SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in…
CVE-2007-34262007-06-27Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the l…
CVE-2007-34252007-06-27Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files via the lang parameter…
CVE-2006-72092007-06-27Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecifie…
CVE-2007-04872007-01-25PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter…
CVE-2006-09582006-03-02Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML vi…
CVE-2006-09572006-03-02Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (…
CVE-2005-38162005-11-26Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (…