Phprofession

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Phprofession records in CISA KEV

No Phprofession vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phprofession 3 records LOW

Records

3 records in Phprofession · all components

TI-2004-01828 CVE-2004-1955 · GHSA-x5v2-7jcx-j662

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0128 Published 2005-05-10 No fix listed

TI-2004-01826 CVE-2004-1953 · GHSA-m9jr-jw96-43qq

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP…

LOW 29

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03302 Published 2005-05-10 No fix listed

TI-2004-01827 CVE-2004-1954 · GHSA-gvxm-8hj2-h5gw

Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2005-05-10 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0