Vulnerabilities

TI-2004-01828 CVE-2004-1955 · GHSA-x5v2-7jcx-j662

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0128 Published 2005-05-10 No fix listed

TI-2004-01827 CVE-2004-1954 · GHSA-gvxm-8hj2-h5gw

Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2005-05-10 No fix listed

TI-2004-01826 CVE-2004-1953 · GHSA-m9jr-jw96-43qq

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP…

LOW 29

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03302 Published 2005-05-10 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote…

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP…