← Back

Maian

maian

10 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Gallery
gallery
3 CVEs
Weblog
weblog
2 CVEs
Support
support
1 CVE
Search
search
1 CVE
Links
links
1 CVE
Guestbook
guestbook
1 CVE
Recipe
recipe
1 CVE

CVEs (10)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-2405
2Maian
Menalto
2Gallery
Gallery
Apr 29, 2026
Apr 22, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.
CVE-2012-1113
2Maian
Menalto
2Gallery
Gallery
Apr 29, 2026
Apr 22, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-3322
1Maian
1Recipe
Apr 23, 2026
Jul 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie.
CVE-2008-3320
1Maian
1Guestbook
Apr 23, 2026
Jul 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie.
CVE-2008-3319
1Maian
1Links
Apr 23, 2026
Jul 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie.
CVE-2008-3318
1Maian
1Weblog
Apr 23, 2026
Jul 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_cookie cookie.
CVE-2007-2078
1Maian
1Weblog
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party re...Show more
PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before useShow less
CVE-2007-2077
1Maian
1Search
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party r...Show more
PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this issue was fixed last year and [no] is longer a problem."Show less
CVE-2007-2076
1Maian
1Gallery
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party r...Show more
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."Show less
CVE-2006-1259
1Maian
1Support
Apr 16, 2026
Mar 19, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to admin/index.php.