Phpwebquest

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpwebquest records in CISA KEV

No Phpwebquest vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpwebquest 1 record LOW

Records

1 record in Phpwebquest · all components

TI-2008-00231 CVE-2008-0249 · GHSA-8ch3-6rpv-59gg

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct…

LOW 28

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2008-01-12 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0