Valarsoft

valarsoft

9 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3350 1Valarsoft 1Webmatic Apr 29, 2026 Jul 12, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
CVE-2010-4808 1Valarsoft 1Webmatic Apr 29, 2026 Jul 8, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2009-4380 1Valarsoft 1Webmatic Apr 23, 2026 Dec 22, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925.
CVE-2009-4379 1Valarsoft 1Webmatic Apr 23, 2026 Dec 22, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924.
CVE-2008-2925 1Valarsoft 1Webmatic Apr 23, 2026 Jun 30, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-2924 1Valarsoft 1Webmatic Apr 23, 2026 Jun 30, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2007-3727 1Valarsoft 1Webmatic Apr 23, 2026 Jul 12, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."
CVE-2007-3648 1Valarsoft 1Webmatic Apr 23, 2026 Jul 10, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php a...Show more SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2007-0839 1Valarsoft 1Webmatic Apr 23, 2026 Feb 8, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) P_LIB and (2) P_INDEX parameters.