Phprpg

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phprpg records in CISA KEV

No Phprpg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phprpg 3 records MEDIUM

Records

3 records

TI-2007-06166 CVE-2007-6469 · GHSA-48mx-4547-4qjp

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is…

MEDIUM 43

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01566 Published 2007-12-20 No fix listed CWE-89

TI-2007-06167 CVE-2007-6470 · GHSA-pq5g-gg66-p9cr

phpRPG 0.8 stores sensitive information under the web root with insufficient access…

LOW 33

phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02088 Published 2007-12-20 No fix listed CWE-264

TI-2007-06181 CVE-2007-6484 · GHSA-j4jh-8f68-5gwr

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute…

LOW 32

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00927 Published 2007-12-20 No fix listed CWE-89

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0