Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

quirm CVEs

Beta · best-effort

6 CVEs tagged to vendor quirm — 0 Critical, 1 High, 5 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2011-3854

Published Sep 28, 2011

Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-0340

Published Jan 29, 2009

Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-0331

Published Jan 29, 2009

Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attackers to read arbitrary files via a .. (dot dot) in the file…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2007-4861

Published Oct 30, 2007

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array paramet…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-4862

Published Oct 30, 2007

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-4863

Published Oct 30, 2007

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1