Most severe vulnerabilities for vendor "b2evolution"

9.8

First published (updated )

CVE-2021-31632

Evolutionb2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.

9.8

First published (updated )

CVE-2016-8901

EvolutionInput Validation

9.8

First published (updated )

CVE-2017-1000423

EvolutionPath Traversal

9.1

First published (updated )

CVE-2017-5539

EvolutionAn authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password …

9.1

First published (updated )

CVE-2022-30935

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

B2evolutionCSRF

8.8

First published (updated )

CVE-2021-31631

EvolutionSQL Injection

8.8

First published (updated )

CVE-2021-28242

EvolutionPath Traversal

8.1

First published (updated )

CVE-2017-5480

EvolutionPHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 thr…

7.5

First published (updated )

CVE-2006-6417

EvolutionDirectory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to i…

7.5

First published (updated )

CVE-2007-2681

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

EvolutionMultiple PHP remote file inclusion vulnerabilities in b2evolution allow remote attackers to execute …

7.5

First published (updated )

CVE-2007-2358

B2evolutionSQL Injection

7.5

First published (updated )

CVE-2009-1657

EvolutionThe "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbit…

7.5

First published (updated )

CVE-2016-9479

B2evolutionMalicious File Upload

7.2

First published (updated )

CVE-2022-44036

EvolutionXSS

6.8

First published (updated )

CVE-2006-6197

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

EvolutionSQL Injection, CSRF

6.8

First published (updated )

CVE-2013-7352

EvolutionSQL Injection

6.5

First published (updated )

CVE-2012-5910

EvolutionSQL Injection, CSRF

6.5

First published (updated )

CVE-2013-2945

EvolutionXSS

6.1

First published (updated )

CVE-2016-7149

B2evolutionXSS

6.1

First published (updated )

CVE-2020-22839

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

EvolutionOpen redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform…

6.1

First published (updated )

CVE-2020-22840

EvolutionXSS

5.4

First published (updated )

CVE-2017-5553

EvolutionXSS

5.4

First published (updated )

CVE-2017-5494

EvolutionXSS

5.4

First published (updated )

CVE-2016-7150

EvolutionInfoleak

5

First published (updated )

CVE-2011-3709

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

EvolutionXSS

4.8

First published (updated )

CVE-2020-22841

EvolutionXSS

4.3

First published (updated )

CVE-2012-5911

EvolutionXSS

4.3

First published (updated )

CVE-2014-9599

EvolutionXSS