CVE Tools
Track your stack

Aiocp

8 CVEs tracked since 2006. Since Nov 2006, none of them reached CISA KEV.

Aiocp CVEs per month

Nov 2006 to Oct 2008. Point at a month, or focus the strip and use the arrow keys.
Aiocp CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2006-1140
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-0520
2007-0610
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-1010

Products

The products that kept showing up in Aiocp's monthly top three, with their CVEs summed over those months.

  1. Aiocp84 months

Latest CVEs

The 8 most recently published vulnerabilities affecting Aiocp.

  1. CVE-2008-4782SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter.7.5
  2. CVE-2007-3120Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_...4.3
  3. CVE-2007-2625Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via un...6.8
  4. CVE-2007-2624Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibl...6.8
  5. CVE-2006-5832All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to (1) public/code/cp_dpage.php, possibly involving the a...5.0
  6. CVE-2006-5829Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) choosed_language parameter to (a)...6.8
  7. CVE-2006-5830Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) fori...6.8
  8. CVE-2006-5831PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the load_p...7.5

The record

Peak rank
#13 in Nov 2006
Busiest month shown
Nov 2006, 4 CVEs
Months with a KEV entry
0 since Nov 2006
Monthly snapshots
4 since 2006
Aiocp's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store