Pheap

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pheap records in CISA KEV

No Pheap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pheap 1 record MEDIUM

Records

1 record

TI-2007-02891 CVE-2007-2985 · GHSA-gjr5-xrxx-mv2c

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login…

MEDIUM 50

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator passwor…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04169 Published 2007-06-01 No fix listed CWE-264

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0