Vulnerabilities (CVE)

Filtered by vendor Zoomstats Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-5065 1 Zoomstats 1 Zoomstats 2023-12-10 5.1 MEDIUM N/A
PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter.