Vulnerabilities (CVE)

Filtered by vendor Shalwan Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3310 1 Shalwan 1 Zainu 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the album_id parameter in an AlbumSongs action.
CVE-2009-2341 1 Shalwan 1 Opial 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter.
CVE-2009-2388 1 Shalwan 1 Opial 2024-02-28 6.8 MEDIUM N/A
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.