Phpwhois Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpwhois Project records in CISA KEV

No Phpwhois Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpwhois 3 records MEDIUM

Records

3 records

TI-2015-04403 CVE-2015-5243 · GHSA-c95f-27gx-6vq9

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

MEDIUM 51

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06195 Published 2018-08-20 Fixed in 5.1.0 CWE-94

TI-2015-03379 CVE-2015-3998 · GHSA-5w4g-3x58-7xv5

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the…

LOW 29

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01117 Published 2017-05-17 No fix listed CWE-79

TI-2021-19530 CVE-2021-43698 · GHSA-mg5m-225h-2mpp

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS)…

LOW 28

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00628 Published 2021-11-29 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0