Vulnerabilities

Summary — last 7 days

New vulnerabilities4,787▼ 467 vs. last week
Critical / high1,886▼ 1,154 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)813▲ 701 vs. last week
More filters
–

6 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)1.4%—Proclanmanager PRO Clan Manager12/15/20086/16/2026
Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
ModifiedHigh (7.5)33%ExploitLookstrike LAN Manager2/15/20086/16/2026
Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sys_conf[path][real] parameter to (1) modules\class\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5) db_games.php, (6) db_matches.php, (7)…
ModifiedHigh (7.5)1.2%—Cmpro Team Clan Manager PRO2/24/20076/16/2026
PHP remote file inclusion vulnerability in Clan Manager Pro (CMPRO) 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) rootpath and possibly (2) sitepath parameters to (a) cmpro.ext/comment.core.inc.php and (b) cmpro.intern/comment.core.inc.php. NOTE: the provenance of this…
ModifiedHigh (7.5)1.4%—Cmpro Team Clan Manager PRO2/24/20076/16/2026
PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro (CMPRO) 1.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.
ModifiedHigh (9.3)2.0%—Clan Manager PRO2/24/20076/16/2026
PHP remote file inclusion vulnerability in cmpro.intern/login.inc.php for Clan Manager Pro (CMPRO) 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
ModifiedMedium (5.1)1.6%—Cmpro Team Clan Manager PRO6/9/20066/16/2026
PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters.
Orbitaley — Vulnerabilities