Phpfaber

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpfaber records in CISA KEV

No Phpfaber vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Topsites 4 records LOW Phpfaber Content Management System 2 records LOW Urlinn 1 record LOW

Records

7 records

TI-2007-02076 CVE-2007-2155 · GHSA-34gx-7858-4cgx

Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote…

LOW 39

Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a ..

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02853 Published 2007-04-19 No fix listed

TI-2006-03657 CVE-2006-3770 · GHSA-jxwj-gff6-r432

Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and…

LOW 36

Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i_cat or (2) method parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01724 Published 2006-07-21 No fix listed

TI-2007-05523 CVE-2007-5754 · GHSA-9637-782j-wq7f

PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn…

LOW 34

PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dir_ws parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02073 Published 2007-10-31 No fix listed CWE-94

TI-2006-05431 CVE-2006-5626 · GHSA-pp4w-rrm7-rp43

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in…

LOW 24

Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probab…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01954 Published 2006-10-31 No fix listed

TI-2009-04145 CVE-2009-4382 · GHSA-wcw5-3gj5-m5rh

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36…

LOW 23

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2009-12-22 No fix listed CWE-79

TI-2006-03778 CVE-2006-3902 · GHSA-cmm7-pfh5-5hxj

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or HTML via the i_cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0094 Published 2006-07-27 No fix listed

TI-2006-01823 CVE-2006-1878 · GHSA-56v2-ccfq-r8h3

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote…

LOW 18

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02218 Published 2006-04-20 No fix listed

Open these records in search →

Critical	0
High	2
Medium	4
Low	1
No CVSS	0