Read the docs

Phkp Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phkp Project records in CISA KEV

No Phkp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Phkp · all components

Priority MEDIUM 48

PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in function pgp_exec() phkp.php:98 that…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0322 Published 2018-12-20 No fix listed CWE-78
TI-2019-16007 CVE-2019-1010179 · GHSA-h55c-fv22-38f6

OS command injection in PHKP

Priority MEDIUM 47

PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command ('Command Injection').

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02539 Published 2019-07-24 No fix listed CWE-78
Open these records in search →