Read the docs

Phpay

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phpay records in CISA KEV

No Phpay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpay 1 record LOW

Records

1 record in Phpay · all components

TI-2007-06168 CVE-2007-6471 · GHSA-xmfx-vpr2-gpqw

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote…

Priority LOW 30

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot dot backslash) in the…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02299 Published 2007-12-20 No fix listed CWE-22
Open these records in search →