Vulnerabilities

TI-2012-04463 CVE-2012-5288 · GHSA-jx85-239j-h9vf

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers…

LOW 35

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01106 Published 2012-10-04 No fix listed CWE-89

TI-2006-04593 CVE-2006-4756 · GHSA-mr73-g752-3hw7

SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows…

LOW 35

SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01114 Published 2006-09-13 No fix listed CWE-89

TI-2006-04592 CVE-2006-4755 · GHSA-553f-954r-2hcp

Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and…

LOW 22

Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0094 Published 2006-09-13 No fix listed CWE-79

TI-2006-03038 CVE-2006-3138 · GHSA-wg64-259v-95rx

Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02088 Published 2006-06-22 No fix listed CWE-79

TI-2006-02452 CVE-2006-2521 · GHSA-j9mv-f35x-g5mv

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier…

LOW 38

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02687 Published 2006-05-22 No fix listed CWE-94

TI-2005-00839 CVE-2005-0896 · GHSA-28j6-phv6-gpqc

Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01647 Published 2005-03-29 No fix listed CWE-79