Skip to content
Noroxi

prozilla records

15 published records for vendor prozilla.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    15 records
    • CVE-2004-1120
      44Plan

      Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and

      CriticalCVSS 10.0Proof of conceptEPSS 15%

      prozilla · prozilla download acceleratorJan 10, 2005

    • CVE-2005-0523
      33Monitor

      Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers i

      HighCVSS 7.5Proof of conceptEPSS 10%

      prozilla · prozilla download acceleratorMay 2, 2005

    • CVE-2005-2961
      33Monitor

      Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remot

      HighCVSS 7.5Proof of conceptEPSS 9%

      prozilla · prozilla download acceleratorOct 5, 2005

    • CVE-2008-1784
      31Monitor

      Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3)

      HighCVSS 7.5Proof of conceptEPSS 3%

      prozilla · topsitesApr 15, 2008

    • CVE-2008-1863
      31Monitor

      SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to execute arbitrary SQL c

      HighCVSS 7.5Proof of conceptEPSS 2%

      prozilla · cheatsApr 17, 2008

    • CVE-2008-6115
      30Monitor

      SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id

      HighCVSS 7.5Proof of conceptEPSS 1%

      prozilla · hosting indexFeb 11, 2009

    • CVE-2007-3809
      30Monitor

      Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id

      HighCVSS 7.5Proof of conceptEPSS 1%

      prozilla · prozilla directory scriptJul 16, 2007

    • CVE-2008-1864
      30Monitor

      SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project

      HighCVSS 7.5Proof of conceptEPSS 1%

      prozilla · prozilla freelancersApr 17, 2008

    • CVE-2007-4258
      30Monitor

      SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via th

      HighCVSS 7.5Proof of conceptEPSS 1%

      prozilla · prozilla pub site directoryAug 8, 2007

    • CVE-2008-1788
      30Monitor

      SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL comma

      HighCVSS 7.5Proof of conceptEPSS 1%

      prozilla · entertainersApr 15, 2008

    • CVE-2007-4362
      27Monitor

      SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parame

      MediumCVSS 6.8Proof of conceptEPSS 1%

      prozilla · webringAug 15, 2007

    • CVE-2008-2083
      27Monitor

      SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote attackers to execut

      MediumCVSS 6.8Proof of conceptEPSS 1%

      prozilla · hosting indexMay 5, 2008

    • CVE-2008-1789
      27Monitor

      SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter

      MediumCVSS 6.8Proof of conceptEPSS 1%

      prozilla · forumApr 15, 2008

    • CVE-2008-1783
      26Monitor

      Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/Dele

      MediumCVSS 6.4Proof of conceptEPSS 2%

      prozilla · reviewsApr 15, 2008

    • CVE-2008-1785
      23Monitor

      delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s p

      MediumCVSS 5.5Proof of conceptEPSS 2%

      prozilla · top 100Apr 15, 2008