Phpstore

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpstore records in CISA KEV

No Phpstore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Auto Classifieds 1 record LOW Complete Classifieds 1 record LOW Phpcareers 1 record LOW Real Estate 1 record LOW Wholesale 1 record LOW Wholesales 1 record LOW Yahoo Answers 1 record LOW

Records

6 records

TI-2008-06619 CVE-2008-6931 · GHSA-272r-5fmj-xph5

Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows…

LOW 35

Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessin…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03391 Published 2009-08-11 No fix listed CWE-264

TI-2008-06618 CVE-2008-6930 · GHSA-7gp6-ww33-8jvj

Unrestricted file upload vulnerability in PHPStore Real Estate allows remote…

LOW 35

Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct reques…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03391 Published 2009-08-11 No fix listed CWE-264

TI-2008-06617 CVE-2008-6929 · GHSA-hxx9-xm9c-ppmg

Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote…

LOW 35

Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct r…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03395 Published 2009-08-11 No fix listed CWE-264

TI-2008-06616 CVE-2008-6928 · GHSA-38p7-f895-f9ch

Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote…

LOW 35

Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a dire…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03289 Published 2009-08-11 No fix listed CWE-264

TI-2008-05210 CVE-2008-5493 · GHSA-c596-6wpm-c2v3

SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows…

LOW 35

SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01189 Published 2008-12-12 No fix listed CWE-89

TI-2008-05207 CVE-2008-5490 · GHSA-9hvr-cm52-pjj2

SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote…

LOW 35

SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-12-12 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0