Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Php-post records in CISA KEVNo Php-post vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 25
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01113 · Published 2005-03-22 · No fix listed
Priority LOW 22
Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00938 · Published 2005-03-22 · No fix listed
Open these records in search →