Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Zenas Subscribe
Filtered by product Paolink
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3423 1 Zenas 1 Paolink 2017-09-18 6.8 MEDIUM N/A
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3320 1 Zenas 1 Paolink 2017-08-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.