Phlymail

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phlymail records in CISA KEV

No Phlymail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phlymail 3 records LOW Phlymail Lite 2 records LOW

Records

5 records

TI-2006-04277 CVE-2006-4429 · GHSA-mjcp-8594-qxpc

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite…

LOW 36

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] param…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01621 Published 2006-08-29 No fix listed

TI-2005-02470 CVE-2005-2606 · GHSA-h5mm-qpcp-gqc7

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.

LOW 36

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01404 Published 2005-08-17 No fix listed

TI-2005-04382 CVE-2005-4652 · GHSA-hp8r-3wgf-2x3x

SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute…

LOW 31

SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0127 Published 2006-01-14 No fix listed

TI-2006-04144 CVE-2006-4291 · GHSA-hggc-xxr9-jp54

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail…

LOW 29

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] par…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03081 Published 2006-08-22 No fix listed

TI-2005-04396 CVE-2005-4666 · GHSA-g6p7-8xmm-rr6g

Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01296 Published 2006-01-19 No fix listed

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0