Eqdkp

eqdkp

Vendor: Eqdkp • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-2222 1Eqdkp 1Eqdkp Apr 23, 2026 May 14, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id parameter.
CVE-2007-3079 1Eqdkp 1Eqdkp Apr 23, 2026 Jun 6, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path.
CVE-2007-3077 1Eqdkp 1Eqdkp Apr 23, 2026 Jun 6, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter.
CVE-2007-2716 1Eqdkp 1Eqdkp Apr 23, 2026 May 16, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of...Show more Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2007-0760 1Eqdkp 1Eqdkp Apr 23, 2026 Feb 6, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed R...Show more EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allows remote attackers to read or modify account names and passwords via a spoofed Referer.Show less
CVE-2006-2256 1Eqdkp 1Eqdkp Apr 16, 2026 May 9, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkp_root_path parameter.
CVE-2005-2615 1Eqdkp 1Eqdkp Apr 16, 2026 Aug 17, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id.