Globalmegacorp : Security Vulnerabilities, CVEs,
PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.
Max CVSS
7.5
EPSS Score
1.08%
Published
2007-02-06
Updated
2018-10-16
SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: this issue has been disputed by a reliable third party, who states that inc/common.php only contains function definitions
Max CVSS
7.5
EPSS Score
0.24%
Published
2007-02-06
Updated
2024-03-21
Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.
Max CVSS
6.8
EPSS Score
1.92%
Published
2007-05-04
Updated
2017-07-29
Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php. NOTE: certain parameter values also trigger path disclosure.
Max CVSS
4.3
EPSS Score
0.72%
Published
2007-05-14
Updated
2017-07-29
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.
Max CVSS
4.3
EPSS Score
0.64%
Published
2007-05-14
Updated
2017-07-29
5 vulnerabilities found