Phenotype-cms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Phenotype-cms records in CISA KEV

No Phenotype-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phenotype Cms 3 records LOW

Records

3 records in Phenotype Cms · all components

TI-2009-03380 CVE-2009-3543 · GHSA-w595-w6qf-w9r3

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9…

LOW 37

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02002 Published 2009-10-02 No fix listed CWE-89

TI-2011-00342 CVE-2011-0407 · GHSA-442c-c4xc-v7x8

SQL injection vulnerability in the store function in…

LOW 35

SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0115 Published 2011-01-11 No fix listed CWE-89

TI-2009-02811 CVE-2009-2951 · GHSA-vxrr-hhh6-m2mm

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which…

LOW 34

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00616 Published 2009-08-24 No fix listed CWE-310

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0