cbcvebase.

Nicola Asuni All In One Control Panel vulnerabilities

2 known vulnerabilities affecting nicola_asuni/all_in_one_control_panel.

Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2007-0223P3HIGHCVSS 7.5v1.3.000v1.3.001+7 more2007-01-13
CVE-2007-0223 [HIGH] CVE-2007-0223: SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Con SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the download_category parameter.
nvd
CVE-2007-0365P4MEDIUMCVSS 6.8≤ 1.3.009v1.3.000+8 more2007-01-19
CVE-2007-0365 [MEDIUM] CVE-2007-0365: Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830.
nvd