| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3751 | 4.3 |
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter.
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 | |
| CVE-2009-3753 | 7.5 |
Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 | |
| CVE-2009-3752 | 7.5 |
SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter.
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 |