Vulnerabilities

TI-2014-06050 CVE-2014-7265 · GHSA-5pr8-4599-w79v

Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject…

LOW 22

Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-12-12 No fix listed CWE-79

TI-2011-03310 CVE-2011-3753 · GHSA-495p-r7rw-x764

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request…

LOW 26

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2008-06911 CVE-2008-7223 · GHSA-8mv3-24h6-22v7

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_me…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01199 Published 2009-09-14 No fix listed CWE-79

TI-2008-06261 CVE-2008-6571 · GHSA-jqwv-7fc2-639p

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via (1) new_images.php, (2) login.php, and unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-03-31 No fix listed CWE-79

TI-2008-01783 CVE-2008-1856 · GHSA-rrcf-jjfc-28h5

plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication…

LOW 28

plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02685 Published 2008-04-16 No fix listed CWE-20

TI-2008-01424 CVE-2008-1487 · GHSA-cvq8-fwgp-jgv2

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-03-24 No fix listed CWE-79

TI-2007-03921 CVE-2007-4053 · GHSA-rxr5-9xmw-h4rj

SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier…

LOW 38

SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to new_images.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02508 Published 2007-07-30 No fix listed

TI-2006-01869 CVE-2006-1924 · GHSA-82fp-m238-fh5h

SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote…

LOW 31

SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0127 Published 2006-04-20 No fix listed

TI-2006-01868 CVE-2006-1923 · GHSA-w3h6-4v5g-g833

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) RSS/RSS.php and (2) possibly other vectors.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01296 Published 2006-04-20 No fix listed

TI-2006-01793 CVE-2006-1848 · GHSA-pw5h-cq3v-rp53

Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0…

LOW 16

Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01375 Published 2006-04-19 No fix listed

TI-2006-00692 CVE-2006-0713 · GHSA-qw8v-6298-7825

Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include…

LOW 28

Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0309 Published 2006-02-15 No fix listed

TI-2004-01939 CVE-2004-2066 · GHSA-mj8m-9pmq-j4m7

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to…

LOW 36

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01399 Published 2005-05-10 No fix listed

Vulnerabilities

Filters