Vendors / Phpvibe Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Phpvibe records in CISA KEV No Phpvibe vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01219 · Published 2024-07-09 · No fix listed CWE-35
Priority LOW 28
Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01864 · Published 2016-08-26 · No fix listed CWE-79
Priority LOW 25
A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00489 · Published 2024-06-17 · No fix listed CWE-434
Priority LOW 23
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0036 · Published 2024-06-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 3 0 0
