SO
Vendor
Sourceforge
25 products with CVEs on record
28
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-25705
EM
Echo Mirage
Sourceforge
7.8
0%
Apr 12Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field
CVE-2018-25251
S0
Snes9K 0.0.9z
Sourceforge
8.4
0%
Apr 4Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket
CVE-2018-25209
OC
OpenBiz Cubi Lite
Sourceforge
8.2
0%
Mar 26OpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter
CVE-2019-25632
PH
phpFileManager
Sourceforge
5.5
1%
Mar 24phpFileManager 1.7.8 Local File Inclusion via index.php
CVE-2019-25575
SC
SimplePress CMS
Sourceforge
8.2
0%
Mar 21SimplePress CMS 1.0.7 SQL Injection via p and s Parameters
CVE-2019-25539
20
202CMS
Sourceforge
8.2
0%
Mar 12202CMS v10 beta SQL Injection via register.php
CVE-2019-25538
20
202CMS
Sourceforge
8.2
0%
Mar 12202CMS v10 beta SQL Injection via log_user Parameter
CVE-2019-25529
PC
Placeto CMS
Sourceforge
7.1
0%
Mar 12Placeto CMS Alpha rv.4 SQL Injection via page Parameter
CVE-2018-25192
GT
GPS Tracking System
Sourceforge
8.2
0%
Mar 6GPS Tracking System 2.12 SQL Injection via username Parameter
CVE-2018-25190
EA
Easyndexer
Sourceforge
6.5
0%
Mar 6Easyndexer 1.0 Cross-Site Request Forgery via createuser.php
CVE-2018-25189
DC
Data Center Audit
Sourceforge
8.2
0%
Mar 6Data Center Audit 2.6.2 SQL Injection via username Parameter
CVE-2018-25178
EA
Easyndexer
Sourceforge
7.5
1%
Mar 6Easyndexer 1.0 Arbitrary File Download via showtif.php
CVE-2018-25177
DC
Data Center Audit
Sourceforge
5.3
0%
Mar 6Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php
CVE-2018-25166
ME
Meneame English Pligg
Sourceforge
8.2
0%
Mar 6Meneame English Pligg 5.8 SQL Injection via search Parameter
CVE-2008-6161
WR
Wow Raid Manager
Sourceforge
–
1%
Feb 18Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2008-2503
EX
Emule X-ray
Sourceforge
–
1%
May 29Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors
CVE-2008-2298
WS
Web Slider
Sourceforge
–
3%
May 18Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1
CVE-2008-0501
PH
Phpmyclub
Sourceforge
–
2%
Jan 30Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a
CVE-2007-6640
CR
Creammonkey
Sourceforge
–
1%
Jan 4Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify…
CVE-2007-1572
JG
Jgbbs
Sourceforge
–
1%
Mar 21SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a different vector…
CVE-2007-1466
WD
Wordperfect Document Importer-exporter
Sourceforge
–
3%
Mar 16Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause…
CVE-2007-1135
WE
Webmplayer
Sourceforge
–
1%
Mar 2Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to index.php and the…
CVE-2007-1137
PU
Putmail
Sourceforge
–
1%
Mar 2putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password…
CVE-2005-4837
NE
Net-snmp
Sourceforge
–
10%
Dec 31snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of…
CVE-2002-2362
MY
Mymarket
Sourceforge
–
2%
Dec 31Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter
CVE-2002-2364
PT
Php Ticket
Sourceforge
–
1%
Dec 31Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket
CVE-2001-0234
NE
Newsdaemon
Sourceforge
–
2%
May 3NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter