Phamm

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phamm records in CISA KEV

No Phamm vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Phamm · all components

TI-2017-00353 CVE-2017-0378 · GHSA-fq99-wjr9-4cmf

LOW 30

XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01455 Published 2017-07-20 No fix listed CWE-79

TI-2018-14777 CVE-2018-20806 · GHSA-gwf8-5p92-4wmp

LOW 29

Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0098 Published 2019-03-15 No fix listed CWE-79