Vulnerabilities

TI-2006-02734 CVE-2006-2826 · GHSA-75m6-xm9v-mmmm

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a…

LOW 38

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a coo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03116 Published 2006-06-05 No fix listed

TI-2006-00864 CVE-2006-0887 · GHSA-fq4g-p58q-8f6g

Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a…

LOW 39

Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib distribution is available on the server, allows remote attackers to execute arbitrary PHP code by inc…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03453 Published 2006-02-25 No fix listed CWE-94

TI-2001-01323 CVE-2001-1370 · GHSA-qxgr-53mq-mh3m

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows…

MEDIUM 60

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.17202 Published 2003-04-02 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a…

Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a…

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows…