Skip to content
Noroxi

maian records

10 published records for vendor maian.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    10 records
    • CVE-2012-2405
      40Plan

      Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a differe

      CriticalCVSS 10.0No exploitEPSS 1%

      maian · galleryApr 22, 2012

    • CVE-2008-3318
      32Monitor

      admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a

      HighCVSS 7.5Proof of conceptEPSS 8%

      maian · weblogJul 25, 2008

    • CVE-2008-3319
      32Monitor

      admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an

      HighCVSS 7.5Proof of conceptEPSS 7%

      maian · linksJul 25, 2008

    • CVE-2008-3322
      32Monitor

      admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a

      HighCVSS 7.5Proof of conceptEPSS 6%

      maian · recipeJul 25, 2008

    • CVE-2008-3320
      32Monitor

      admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sendin

      HighCVSS 7.5Proof of conceptEPSS 6%

      maian · guestbookJul 25, 2008

    • CVE-2006-1259
      31Monitor

      Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2

      HighCVSS 7.5No exploitEPSS 2%

      maian · supportMar 18, 2006

    • CVE-2007-2077
      31Monitor

      PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in

      HighCVSS 7.5No exploitEPSS 1%

      maian · searchApr 17, 2007

    • CVE-2007-2076
      28Monitor

      PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in

      MediumCVSS 6.8No exploitEPSS 1%

      maian · galleryApr 17, 2007

    • CVE-2007-2078
      28Monitor

      PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in

      MediumCVSS 6.8No exploitEPSS 1%

      maian · weblogApr 17, 2007

    • CVE-2012-1113
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remot

      MediumCVSS 4.3No exploitEPSS 1%

      maian · galleryApr 22, 2012