Vendors / Pl-php Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Pl-php records in CISA KEV No Pl-php vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02663 · Published 2007-04-12 · No fix listed
Priority LOW 37
Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a ..
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02435 · Published 2007-04-12 · No fix listed
Priority LOW 35
Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01029 · Published 2007-04-12 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High3 Medium0 Low0 No CVSS0