Vendors / Php-post Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Php-post records in CISA KEV No Php-post vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in…
CVSS 2.0 MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.16849 · Published 2006-07-21 · No fix listed
Priority LOW 25
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01113 · Published 2005-03-22 · No fix listed
Priority LOW 22
Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00938 · Published 2005-03-22 · No fix listed
Open these records in search → All records by CVSS severity
0 0 3 0 0
