| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3751 | 4.3 |
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter.
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 | |
| CVE-2009-2341 | 7.5 |
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter.
|
19-09-2017 - 01:29 | 07-07-2009 - 19:30 | |
| CVE-2009-3753 | 7.5 |
Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 | |
| CVE-2009-2340 | 7.5 |
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName (aka User Name) parameter. NOTE: some of these details are obtained from third party information.
|
19-09-2017 - 01:29 | 07-07-2009 - 19:30 | |
| CVE-2009-3752 | 7.5 |
SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter.
|
19-09-2017 - 01:29 | 22-10-2009 - 17:30 | |
| CVE-2009-2388 | 6.8 |
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part
|
16-07-2009 - 04:00 | 09-07-2009 - 16:30 |