Vulnerabilities

TI-2011-03293 CVE-2011-3736 · GHSA-p3qp-vw85-29fg

ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct…

LOW 26

ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgrade9.php and certain…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2008-06605 CVE-2008-6917 · GHSA-cx8q-m469-w8fh

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote…

LOW 35

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2009-08-07 No fix listed CWE-89

Vulnerabilities

Filters

ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct…

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote…