← Back

Hamweather

hamweather

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Hamweather
hamweather

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hamweather
1Hamweather
Apr 23, 2026
Oct 10, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse...Show more
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.Show less
1Hamweather
1Hamweather
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
6.4 MEDIUM· v2
HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.