Vulnerabilities (CVE)

Filtered by vendor Brain Book Software Subscribe
Filtered by product Adman
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4020 1 Brain Book Software 1 Adman 2024-02-04 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.
CVE-2006-1375 1 Brain Book Software 1 Adman 2024-02-04 5.0 MEDIUM N/A
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.
CVE-2006-1374 1 Brain Book Software 1 Adman 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter.