Vulnerabilities

TI-2008-02869 CVE-2008-2995 · GHSA-qrm3-ww98-8r4q

Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/login.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00975 Published 2008-07-03 No fix listed CWE-89

TI-2008-02868 CVE-2008-2994 · GHSA-x7xc-gpw2-j5mw

Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01485 Published 2008-07-03 No fix listed CWE-79

TI-2008-02032 CVE-2008-2113 · GHSA-xf5r-wxxg-vm8h

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers…

LOW 35

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-05-08 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote…

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers…