Domphp

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Domphp records in CISA KEV

No Domphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Domphp 6 records MEDIUM

Records

6 records in Domphp · all components

TI-2014-08199 CVE-2014-10037 · GHSA-rr8r-5g86-2w44

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to…

MEDIUM 51

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.18834 Published 2015-01-13 No fix listed CWE-22

TI-2014-08200 CVE-2014-10038 · GHSA-8gfm-hxfq-gm8r

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows…

LOW 37

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2015-01-13 No fix listed CWE-89

TI-2008-00711 CVE-2008-0745 · GHSA-46fr-522j-965p

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote…

LOW 37

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02249 Published 2008-02-13 No fix listed CWE-22

TI-2008-05759 CVE-2008-6064 · GHSA-7c8q-7738-442w

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00931 Published 2009-02-05 No fix listed CWE-89

TI-2008-00264 CVE-2008-0282 · GHSA-2cw2-x59w-4gh7

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows…

LOW 35

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-01-15 No fix listed CWE-89

TI-2008-00265 CVE-2008-0283 · GHSA-9q7p-hgmr-j66g

PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier…

LOW 34

PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01829 Published 2008-01-15 No fix listed CWE-94

Open these records in search →

Critical	0
High	5
Medium	1
Low	0
No CVSS	0