Vulnerabilities (CVE)

Filtered by vendor Phpoutsourcing Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1089 1 Phpoutsourcing 1 Zorum 2025-04-03 5.0 MEDIUM N/A
index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.
CVE-2005-2651 1 Phpoutsourcing 1 Zorum 2025-04-03 7.5 HIGH N/A
gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.
CVE-2005-0677 1 Phpoutsourcing 1 Zorum 2025-04-03 5.0 MEDIUM N/A
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.