Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

AIOCP AIOCPPHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) …

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter.

First published (updated )
CVE-2006-5831

AIOCP AIOCPXSS

Risk 47
Severity
6.8
XSS
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cpforumview.php; (4) choosedlanguage parameter to cpdpage.php; (5) orderdir parameter to cplinkssearch.php; (6) orderfield parameter to (a) cpshowecproducts.php and (b) cpusersonline.php; and the (7) signature and (8) fiscal code fields in the user profile.

First published (updated )
CVE-2006-5830

AIOCP AIOCPAll In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path…

Risk 26
Severity
5
AV:N/AC:L/Au:N/C:P/I:N/A:N

All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to (1) public/code/cpdpage.php, possibly involving the aiocpdp[] parameter, (2) public/code/cpshowecproducts.php, possibly involving the orderfield[] parameter, and (3) public/code/cpshowpagehelp.php, possibly involving the hp[] parameter, which reveal the path in various error messages.

First published (updated )
CVE-2006-5832

AIOCP AIOCPSQL Injection

Risk 47
Severity
6.8
SQL Injection
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) choosedlanguage parameter to (a) cpdpage.php, (b) cpnews.php, (c) cpforumview.php, (d) cpedituser.php, (e) cpnewsletter.php, (f) cplinks.php, (g) cpcontactus.php, (h) cplogin.php, and (i) cpcodicefiscale.php in public/code/; (2) newscategory parameter to public/code/cpnews.php; (3) nlmsgnlcatid parameter to public/code/cpnewsletter.php; (4) linkscategory parameter to public/code/cplinks.php; (5) productcategoryid parameter to public/code/cpshowecproducts.php; (6) orderfield parameter to public/code/cpshowecproducts.php; (7) firstrow parameter to public/code/cpusersonline.php; and (8) orderdir parameter to public/code/cplinkssearch.php.

First published (updated )
CVE-2006-5829

AIOCP AIOCPXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in public/code/cpdpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information.

First published (updated )
CVE-2007-3120

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203