Phpbp

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Phpbp records in CISA KEV

No Phpbp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpbp 3 records LOW

Records

3 records

TI-2008-01355 CVE-2008-1408 · GHSA-9x7q-q6mg-vvp5

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3…

LOW 35

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01235 Published 2008-03-20 No fix listed CWE-89

TI-2007-00360 CVE-2007-0370 · GHSA-v9qg-p6jf-339r

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier…

LOW 35

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2007-01-19 No fix listed

TI-2007-00359 CVE-2007-0369 · GHSA-r4ch-c96g-v4pg

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to…

LOW 35

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2007-01-19 No fix listed

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0