Phpyun

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Phpyun records in CISA KEV

No Phpyun vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpyun 4 records LOW

Records

4 records in Phpyun · all components

TI-2018-13233 CVE-2018-18713 · GHSA-6fm6-9mv4-9wgf

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows…

LOW 37

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02304 Published 2018-10-27 No fix listed CWE-22

TI-2020-14669 CVE-2020-23768 · GHSA-fxj6-gm5w-8mwr

An information disclosure vulnerability was discovered in alipay_function.php in the log…

LOW 35

An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01025 Published 2021-05-21 No fix listed

TI-2018-13167 CVE-2018-18626 · GHSA-p665-f3mv-m9pp

An issue was discovered in PHPYun V4.6.

LOW 35

An issue was discovered in PHPYun V4.6.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2018-10-23 No fix listed

TI-2010-04519 CVE-2010-4796 · GHSA-9jxx-4x48-3ff9

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01084 Published 2011-04-27 No fix listed CWE-89

Open these records in search →

Critical	0
High	4
Medium	0
Low	0
No CVSS	0