Voice Of Web Allmyguests

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-8294 Oct 15, 14:55 HIGH This Week

Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Voice Of Web Allmyguests Php Resource

NVD

CVSS 2.0

7.5

EPSS

0.3%

CVE-2014-8293 Oct 15, 14:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMG_signin_topic parameter to index.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP XSS Voice Of Web Allmyguests Php Resource

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2014-8294

EPSS 0% CVSS 7.5

HIGH This Week

PHP SQLi Voice Of Web Allmyguests +1

NVD

CVE-2014-8293

EPSS 0% CVSS 4.3

MEDIUM This Month

PHP XSS Voice Of Web Allmyguests +1

NVD