Skip to content
Noroxi

valarsoft records

9 published records for vendor valarsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2007-0839
      31Monitor

      Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbi

      HighCVSS 7.5Proof of conceptEPSS 3%

      valarsoft · webmaticFeb 7, 2007

    • CVE-2007-3727
      30Monitor

      Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."

      HighCVSS 7.5No exploitEPSS 1%

      valarsoft · webmaticJul 12, 2007

    • CVE-2007-3648
      30Monitor

      SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary S

      HighCVSS 7.5No exploitEPSS 1%

      valarsoft · webmaticJul 10, 2007

    • CVE-2008-2925
      30Monitor

      SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

      HighCVSS 7.5No exploitEPSS 1%

      valarsoft · webmaticJun 30, 2008

    • CVE-2009-4380
      30Monitor

      Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspe

      HighCVSS 7.5No exploitEPSS 1%

      valarsoft · webmaticDec 22, 2009

    • CVE-2010-4808
      30Monitor

      SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.

      HighCVSS 7.5Proof of conceptEPSS 0%

      valarsoft · webmaticJul 8, 2011

    • CVE-2012-3350
      28Monitor

      SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP he

      MediumCVSS 6.8Proof of conceptEPSS 2%

      valarsoft · webmaticJul 12, 2012

    • CVE-2008-2924
      17Monitor

      Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecifi

      MediumCVSS 4.3No exploitEPSS 1%

      valarsoft · webmaticJun 30, 2008

    • CVE-2009-4379
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script

      MediumCVSS 4.3No exploitEPSS 1%

      valarsoft · webmaticDec 22, 2009