Xlinesoft

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Xlinesoft records in CISA KEV

No Xlinesoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Asprunner 4 records LOW Phprunner 3 records LOW

Records

3 records in Phprunner · all components

TI-2009-00918 CVE-2009-0964 · GHSA-j933-cghj-hrpx

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext…

LOW 37

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01923 Published 2009-03-19 No fix listed CWE-312

TI-2009-00917 CVE-2009-0963 · GHSA-hpg8-q284-3cc6

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow…

LOW 37

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02053 Published 2009-03-19 No fix listed CWE-89

TI-2006-05738 CVE-2006-5956 · GHSA-rwp6-5hp3-x9h3

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3)…

LOW 11

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini, which allows local users to obtain sensitive information by readin…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00336 Published 2006-11-17 No fix listed

Open these records in search →

Critical	0
High	3
Medium	6
Low	1
No CVSS	0