← Back

Cwm Design

cwm-design

4 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Cwmexplorer
cwmexplorer
2 CVEs
Cwmvote
cwmvote
1 CVE
Cwmcounter
cwmcounter
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-6766
1Cwm Design
1Cwmexplorer
Apr 23, 2026
Dec 27, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: The provenance of this information is unknown; details are...Show more
Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: The provenance of this information is unknown; details are obtained solely from third party information.Show less
CVE-2006-6757
1Cwm Design
1Cwmexplorer
Apr 23, 2026
Dec 27, 2006
N/A· v4
N/A· v3
7.8 HIGH· v2
Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file param...Show more
Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file parameter.Show less
CVE-2006-6738
1Cwm Design
1Cwmcounter
Apr 23, 2026
Dec 26, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVE-2006-6732
1Cwm Design
1Cwmvote
Apr 23, 2026
Dec 26, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the abs parameter.