Zeeways records
13 published records for vendor zeeways.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-287 Improper Authentication2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2019-25636No exploit | Zeeways Jobsite CMS Lastest SQL Injection via id Parameterzeeways · jobsite cms · CWE-89 | High8.8 | — | 0.3% | Mar 24, 2026 |
35Monitor | CVE-2019-25635No exploit | Zeeways Matrimony CMS Lastest SQL Injection via profile_listzeeways · matrimony cms · CWE-89 | High8.8 | — | 0.3% | Mar 24, 2026 |
32Monitor | CVE-2008-6912Proof of concept | Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/hozeeways · shaadiclone · CWE-287 | High7.5 | — | 7.4% | Aug 7, 2009 |
31Monitor | CVE-2008-5042Proof of concept | Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct requeszeeways · photovideotube · CWE-287 | High7.5 | — | 3.2% | Nov 12, 2008 |
30Monitor | CVE-2008-3706Proof of concept | SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parazeeways · zeejobsite · CWE-89 | High7.5 | — | 1.0% | Aug 19, 2008 |
30Monitor | CVE-2008-4717Proof of concept | SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid paramzeeways · zeelyrics · CWE-89 | High7.5 | — | 1.0% | Oct 23, 2008 |
30Monitor | CVE-2008-5782Proof of concept | SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid paramezeeways · zeematri · CWE-89 | High7.5 | — | 1.0% | Dec 31, 2008 |
27Monitor | CVE-2008-6913Proof of concept | Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrazeeways · zeejobsite · CWE-20 | Medium6.5 | — | 3.2% | Aug 7, 2009 |
27Monitor | CVE-2008-6914Proof of concept | Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary zeeways · zeeproperty · CWE-264 | Medium6.5 | — | 3.0% | Aug 7, 2009 |
18Monitor | CVE-2010-2144Proof of concept | Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary zeeways · ebay clone auction script · CWE-79 | Medium4.3 | — | 3.3% | Jun 3, 2010 |
17Monitor | CVE-2008-6915Proof of concept | Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary webzeeways · zeeproperty · CWE-79 | Medium4.3 | — | 1.5% | Aug 7, 2009 |
17Monitor | CVE-2009-4601Proof of concept | Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary webzeeways · zeejobsite · CWE-79 | Medium4.3 | — | 1.4% | Jan 12, 2010 |
17Monitor | CVE-2009-4316No exploit | Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script orzeeways · zeelyrics · CWE-79 | Medium4.3 | — | 0.8% | Dec 14, 2009 |
- CVE-2019-2563635Monitor
Zeeways Jobsite CMS Lastest SQL Injection via id Parameter
HighCVSS 8.8No exploitEPSS 0%zeeways · jobsite cmsMar 24, 2026
- CVE-2019-2563535Monitor
Zeeways Matrimony CMS Lastest SQL Injection via profile_list
HighCVSS 8.8No exploitEPSS 0%zeeways · matrimony cmsMar 24, 2026
- CVE-2008-691232Monitor
Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/ho
HighCVSS 7.5Proof of conceptEPSS 7%zeeways · shaadicloneAug 7, 2009
- CVE-2008-504231Monitor
Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct reques
HighCVSS 7.5Proof of conceptEPSS 3%zeeways · photovideotubeNov 12, 2008
- CVE-2008-370630Monitor
SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid para
HighCVSS 7.5Proof of conceptEPSS 1%zeeways · zeejobsiteAug 19, 2008
- CVE-2008-471730Monitor
SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid param
HighCVSS 7.5Proof of conceptEPSS 1%zeeways · zeelyricsOct 23, 2008
- CVE-2008-578230Monitor
SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parame
HighCVSS 7.5Proof of conceptEPSS 1%zeeways · zeematriDec 31, 2008
- CVE-2008-691327Monitor
Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitra
MediumCVSS 6.5Proof of conceptEPSS 3%zeeways · zeejobsiteAug 7, 2009
- CVE-2008-691427Monitor
Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary
MediumCVSS 6.5Proof of conceptEPSS 3%zeeways · zeepropertyAug 7, 2009
- CVE-2010-214418Monitor
Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary
MediumCVSS 4.3Proof of conceptEPSS 3%zeeways · ebay clone auction scriptJun 3, 2010
- CVE-2008-691517Monitor
Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web
MediumCVSS 4.3Proof of conceptEPSS 1%zeeways · zeepropertyAug 7, 2009
- CVE-2009-460117Monitor
Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web
MediumCVSS 4.3Proof of conceptEPSS 1%zeeways · zeejobsiteJan 12, 2010
- CVE-2009-431617Monitor
Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script or
MediumCVSS 4.3No exploitEPSS 0%zeeways · zeelyricsDec 14, 2009