Ourphp

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ourphp records in CISA KEV

No Ourphp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Ourphp · all components

TI-2023-14179 CVE-2023-30211 · GHSA-mwpg-w44j-q7xx

MEDIUM 51

OURPHP <= 7.2.0 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00953 Published 2023-04-26 No fix listed CWE-89

TI-2023-14180 CVE-2023-30212 · GHSA-565m-x34r-mrjv

LOW 38

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.08115 Published 2023-04-26 No fix listed CWE-79

TI-2023-14178 CVE-2023-30210 · GHSA-rg7m-x7gx-hg4q

LOW 30

OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01173 Published 2023-04-26 No fix listed CWE-79