Php Resource Voice Of Web Allmyguests vulnerabilities
3 known vulnerabilities affecting php_resource/voice_of_web_allmyguests.
Total CVEs
3
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-1961P3HIGHCVSS 7.5PoCv0.4.12008-04-25
CVE-2008-1961 [HIGH] CWE-89 CVE-2008-1961: SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers t
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMG_id parameter in a comments action.
nvd
CVE-2014-8294P3HIGHCVSS 7.5v0.4.12014-10-15
CVE-2014-8294 [HIGH] CWE-89 CVE-2014-8294: Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to e
Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password.
nvd
CVE-2014-8293P4MEDIUMCVSS 4.3v0.4.12014-10-15
CVE-2014-8293 [MEDIUM] CWE-79 CVE-2014-8293: Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers t
Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMG_signin_topic parameter to index.php.
nvd