Phpee

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Phpee records in CISA KEV

No Phpee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pphlogger 2 records LOW Power Phlogger 1 record LOW Ya Book 1 record LOW

Records

4 records

TI-2007-03293 CVE-2007-3399 · GHSA-vr9w-hgcg-99p2

SQL injection vulnerability in include/get_userdata.php in Power Phlogger (PPhlogger)…

LOW 36

SQL injection vulnerability in include/get_userdata.php in Power Phlogger (PPhlogger) 2.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01423 Published 2007-06-26 No fix listed CWE-89

TI-2007-02183 CVE-2007-2265 · GHSA-x2c8-h488-vjrg

Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to…

LOW 32

Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01176 Published 2007-04-25 No fix listed

TI-2009-04038 CVE-2009-4254 · GHSA-8fhm-q7j5-hfvq

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct…

LOW 25

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.in…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2009-12-10 No fix listed CWE-200

TI-2009-04037 CVE-2009-4253 · GHSA-348p-j6mh-fgrx

Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01452 Published 2009-12-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0