← Back

Allomani

allomani

5 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Allomani Weblinks
allomani_weblinks
2 CVEs
Mobile
mobile
1 CVE
Movies Library
movies_library
1 CVE
Audio & Video Library
audio_&_video_library
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-8593
1Allomani
1Allomani Weblinks
May 6, 2026
Nov 4, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default URI to admin.php or the (2) id parameter to admin.php or (3)...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default URI to admin.php or the (2) id parameter to admin.php or (3) go.php.Show less
CVE-2014-8766
1Allomani
1Allomani Weblinks
May 6, 2026
Oct 14, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.ph...Show more
Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in a browse action to index.php or (2) unspecified parameters to admin.php.Show less
CVE-2009-4735
1Allomani
1Audio & Video Library
Apr 29, 2026
Mar 18, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
CVE-2009-4734
1Allomani
1Movies Library
Apr 29, 2026
Mar 18, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
CVE-2009-3430
1Allomani
1Mobile
Apr 23, 2026
Sep 25, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.