Kwsphp

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    6
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2008-6201

    Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information.

    Last Modified: Apr 23, 2026
    Published: Feb 20, 2009

    CVE-2008-6197

    SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal parameter in a gal action.

    Last Modified: Apr 23, 2026
    Published: Feb 20, 2009

    CVE-2008-1757

    Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.

    Last Modified: Apr 23, 2026
    Published: Apr 12, 2008

    CVE-2008-1758

    SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.

    Last Modified: Apr 23, 2026
    Published: Apr 12, 2008

    CVE-2008-1759

    SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.

    Last Modified: Apr 23, 2026
    Published: Apr 12, 2008
    Items Per Page