Vulnerabilities

TI-2013-05955 CVE-2013-7289 · GHSA-wc36-xcjr-fj7g

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-01-10 No fix listed CWE-79

TI-2013-05943 CVE-2013-7277 · GHSA-p3xr-h9wq-j6wv

Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb)…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to saa.php, (2) usernam…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01655 Published 2014-01-08 No fix listed CWE-79

TI-2011-01375 CVE-2011-1556 · GHSA-x84h-fcr4-jgx6

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase…

LOW 32

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01082 Published 2011-04-01 No fix listed CWE-89

TI-2011-01374 CVE-2011-1555 · GHSA-2c5c-cr43-hgwm

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and…

LOW 32

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01007 Published 2011-04-01 No fix listed CWE-89

TI-2011-01365 CVE-2011-1546 · GHSA-rp8m-q5pp-m86r

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3…

LOW 37

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01991 Published 2011-04-01 No fix listed CWE-89

TI-2008-06203 CVE-2008-6513 · GHSA-99w7-h4pv-6cx2

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb)…