Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 486 respecto a la semana anterior

Críticas / altas1302▼ 188 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-6201	Modificada	Media (6.8)	3.1%	💥 Exploit	Kwsphp	20/2/2009	16/6/2026	Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-6197	Modificada	Alta (7.5)	0.97%	💥 Exploit	Kwsphp Galerie Module	20/2/2009	16/6/2026	SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal parameter in a gal action.
CVE-2008-1758	Modificada	Alta (7.5)	0.97%	💥 Exploit	Kwsphp	12/4/2008	16/6/2026	SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.
CVE-2008-1757	Modificada	Media (4.3)	1.5%	💥 Exploit	Kwsphp	12/4/2008	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.
CVE-2008-1759	Modificada	Alta (7.5)	1.0%	💥 Exploit	Jeuxflash Module Kwsphp	12/4/2008	16/6/2026	SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.
CVE-2007-5485	Modificada	Alta (7.5)	1.0%	💥 Exploit	Kwsphp	16/10/2007	16/6/2026	SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
CVE-2007-5458	Modificada	Media (6.8)	0.95%	💥 Exploit	Alorys-hebergement Kwsphp Alorys-hebergement Newsletter Module	14/10/2007	16/6/2026	SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.
CVE-2007-4979	Modificada	Alta (7.5)	1.0%	💥 Exploit	Kwsphp	19/9/2007	16/6/2026	SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.
CVE-2007-4956	Modificada	Alta (7.5)	3.5%	💥 Exploit	Kwsphp	18/9/2007	16/6/2026	Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff…
CVE-2007-4922	Modificada	Media (6.5)	0.86%	💥 Exploit	Jeuxflash Module Kwsphp	17/9/2007	16/6/2026	SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php. NOTE: some details are obtained from third party information.