Hinton Design

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Hinton Design records in CISA KEV

No Hinton Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpht Topsites 5 records LOW Phphd 3 records LOW Phphg Guestbook 3 records LOW Phpstatus 3 records LOW Phphd Download System 1 record LOW Phpht Topsites Free 1 record LOW

Records

3 records in Phpstatus · all components

TI-2006-00555 CVE-2006-0572 · GHSA-5p7v-4h9m-3c5w

phpstatus 1.0 does not require passwords when using cookies to identify a user, which…

LOW 36

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01679 Published 2006-02-07 No fix listed

TI-2006-00553 CVE-2006-0570 · GHSA-xcfw-v4rm-89f7

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is…

LOW 36

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01446 Published 2006-02-07 No fix listed

TI-2006-00554 CVE-2006-0571 · GHSA-v6r9-g2f2-3qxq

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0133 Published 2006-02-07 No fix listed

Open these records in search →

Critical	0
High	12
Medium	4
Low	0
No CVSS	0