CVE-2009-2107

Webmedia Explorer (webmex) is affected by CVE-2009-2107 across versions 5.0.9 and 5.10.0, with multiple XSS in index.php. The root cause is insufficient sanitization of user-supplied data, allowing attackers to inject script via parameters such as search, tag, bookmark, and remember, among others...

CVE-2007-4948

Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer webmex 3.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the pathinclude parameter to includes/rss.class.php, 2 a URL in the pathtemplate parameter to a templates/main.tpl.php or b...

CVE-2007-4948

CVE-2007-4948 : Webmedia Explorer (webmex) 3.2.2 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause PHP code execution by supplying a URL in either the path_include parameter to includes/rss.class.php, the path_template parameter (to templates/main.tpl.php or...