Vulnerabilities

TI-2006-06709 CVE-2006-6966 · GHSA-3qpg-c9c8-hv6g

phpGraphy before 0.9.13a does not properly unset variables when the input data includes a…

LOW 38

phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0259 Published 2007-02-04 No fix listed

TI-2006-01833 CVE-2006-1888 · GHSA-r258-mhfc-387p

phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain…

LOW 34

phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain administrator privileges via a direct request to index.php with the editwelcome parameter set to 1, which can then be used to modify…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02221 Published 2006-04-20 No fix listed CWE-264

TI-2005-02598 CVE-2005-2735 · GHSA-pp59-gwrw-7wx5

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0197 Published 2005-08-29 No fix listed

Vulnerabilities

Filters

phpGraphy before 0.9.13a does not properly unset variables when the input data includes a…

phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain…

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote…