Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

aweb_labs CVEs

Beta · best-effort

5 CVEs tagged to vendor aweb_labs — 0 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2007-1247

Published Mar 3, 2007

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_news parameter to (1) li…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1637

Published Apr 6, 2006

Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) po…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1638

Published Apr 6, 2006

Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php,…

CVSS 5.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1612

Published Apr 4, 2006

Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (…

CVSS 5.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1613

Published Apr 4, 2006

Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1