Read the docs

Phpuploader Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Phpuploader Project records in CISA KEV

No Phpuploader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpuploader 2 records LOW

Records

2 records in Phpuploader · all components

TI-2022-07949 CVE-2022-23986 · GHSA-x6pj-57g9-3f6f

SQL injection in Dojin Club MICMNIS phpUploader

Priority LOW 36

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0169 Published 2022-02-24 No fix listed CWE-89
TI-2022-08308 CVE-2022-24435 · GHSA-w7cc-xpv6-f653

Cross-site scripting in Dojin Club MICMNIS phpUploader

Priority LOW 29

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00946 Published 2022-02-24 No fix listed CWE-79
Open these records in search →