Vulnerabilities

TI-2007-06181 CVE-2007-6484 · GHSA-j4jh-8f68-5gwr

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute…

LOW 32

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00927 Published 2007-12-20 No fix listed CWE-89

TI-2007-06167 CVE-2007-6470 · GHSA-pq5g-gg66-p9cr

phpRPG 0.8 stores sensitive information under the web root with insufficient access…

LOW 33

phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02088 Published 2007-12-20 No fix listed CWE-264

TI-2007-06166 CVE-2007-6469 · GHSA-48mx-4547-4qjp

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is…

MEDIUM 43

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01566 Published 2007-12-20 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute…

phpRPG 0.8 stores sensitive information under the web root with insufficient access…

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is…