← Back

Web4future

web4future

6 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Portal Solutions
portal_solutions
2 CVEs
News Portal
news_portal
2 CVEs
Edating Professional
edating_professional
1 CVE
Keyword Frequency Counter
keyword_frequency_counter
1 CVE
Web4future Ecommerce
web4future_ecommerce
0 CVEs
Affiliate Manager Professional
affiliate_manager_professional
0 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-2244
1Web4future
1News Portal
Apr 16, 2026
May 9, 2006
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.
CVE-2006-2243
1Web4future
1News Portal
Apr 16, 2026
May 9, 2006
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php. NOTE: this issue mi...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php. NOTE: this issue might be resultant from SQL injection.Show less
CVE-2005-4039
1Web4future
1Portal Solutions
Apr 16, 2026
Dec 6, 2005
N/A· v4
N/A· v3
7.8 HIGH· v2
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.
CVE-2005-4038
1Web4future
1Portal Solutions
Apr 16, 2026
Dec 6, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.
CVE-2005-4036
1Web4future
1Keyword Frequency Counter
Apr 16, 2026
Dec 6, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."
CVE-2005-4034
1Web4future
1Edating Professional
Apr 16, 2026
Dec 6, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to...Show more
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php.Show less