Phpcredo

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Phpcredo records in CISA KEV

No Phpcredo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phcdownload 6 records LOW

Records

6 records in Phcdownload · all components

TI-2008-06286 CVE-2008-6596 · GHSA-7h6w-jh96-39rq

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers…

LOW 35

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01096 Published 2009-04-03 No fix listed CWE-89

TI-2007-06366 CVE-2007-6670 · GHSA-f4rg-xx3q-hh5w

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2008-01-08 No fix listed CWE-89

TI-2006-03417 CVE-2006-3525 · GHSA-jchf-6ppj-36jw

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release…

LOW 35

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01114 Published 2006-07-12 No fix listed

TI-2007-06365 CVE-2007-6669 · GHSA-27h5-9gpw-j66h

Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2008-01-08 No fix listed CWE-79

TI-2008-06287 CVE-2008-6597 · GHSA-2wqp-c8qr-gw2j

Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1…

LOW 22

Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01178 Published 2009-04-03 No fix listed CWE-79

TI-2007-06285 CVE-2007-6588 · GHSA-jx36-2m8g-g3cf

Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2007-12-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0