Read the docs

Phpizabi

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phpizabi records in CISA KEV

No Phpizabi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpizabi 4 records MEDIUM

Records

4 records

TI-2008-03101 CVE-2008-3239 · GHSA-53ph-pxh2-3gf4

Unrestricted file upload vulnerability in the writeLogEntry function in…

Priority MEDIUM 48

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05165 Published 2008-07-21 No fix listed CWE-20
TI-2008-01940 CVE-2008-2018 · GHSA-q3v4-8f88-pc47

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe…

Priority LOW 23

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obtain sensitive inform…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02156 Published 2008-04-30 No fix listed CWE-200
Open these records in search →