Sangwan Kim's vulnerability profile centers on lightweight web utilities including Bookmark4u and PHPIndexPage, which are subject to application-layer code-injection and SQL-injection flaws characteristic of server-side scripting without parameterized query discipline. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sangwan Kim over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-2877HIGH PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php | Jun 7, 2006 | 7.5 | 31 | NO | YES |
CVE-2007-0499MEDIUM PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the env[inc_p | Jan 25, 2007 | 6.8 | 29 | NO | YES |
CVE-2003-1253HIGH PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, | Dec 31, 2003 | 7.5 | 24 | NO | NO |
CVE-2006-7025HIGH SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter. | Feb 23, 2007 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sangwan Kim.
Media articles that mention a CVE ID that affects a product developed by Sangwan Kim — matched by CVE ID, not by vendor name.