← Back

Phpadultsite

phpadultsite

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Phpadultsite Cms
phpadultsite_cms
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6981
1Phpadultsite
1Phpadultsite Cms
Apr 23, 2026
Aug 19, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be...Show more
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.Show less
CVE-2008-6980
1Phpadultsite
1Phpadultsite Cms
Apr 23, 2026
Aug 19, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php. NOTE: some of these details...Show more
SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-6979
1Phpadultsite
1Phpadultsite Cms
Apr 23, 2026
Aug 19, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some...Show more
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability.Show less