Vulnerabilities

TI-2005-04396 CVE-2005-4666 · GHSA-g6p7-8xmm-rr6g

Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01296 Published 2006-01-19 No fix listed

TI-2005-04382 CVE-2005-4652 · GHSA-hp8r-3wgf-2x3x

SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute…

LOW 31

SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0127 Published 2006-01-14 No fix listed

TI-2005-02470 CVE-2005-2606 · GHSA-h5mm-qpcp-gqc7

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.

LOW 36

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01404 Published 2005-08-17 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote…

SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute…

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.