Vulnerabilities

TI-2008-05685 CVE-2008-5989 · GHSA-rqq9-f77h-855f

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when…

LOW 34

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02053 Published 2009-01-28 No fix listed CWE-22

TI-2008-04458 CVE-2008-4675 · GHSA-g28q-549m-f7w9

SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote…

LOW 35

SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-22 No fix listed CWE-89

TI-2005-02167 CVE-2005-2289 · GHSA-9qmx-57jw-hm4c

PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct…

LOW 26

PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01373 Published 2005-07-17 No fix listed

TI-2005-02166 CVE-2005-2288 · GHSA-f489-394v-4j27

Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-07-17 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when…

SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote…

PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct…

Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to…