Vulnerabilities

TI-2009-00918 CVE-2009-0964 · GHSA-j933-cghj-hrpx

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext…

LOW 37

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01923 Published 2009-03-19 No fix listed CWE-312

TI-2009-00917 CVE-2009-0963 · GHSA-hpg8-q284-3cc6

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow…

LOW 37

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02053 Published 2009-03-19 No fix listed CWE-89

TI-2006-05738 CVE-2006-5956 · GHSA-rwp6-5hp3-x9h3

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3)…

LOW 11

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini, which allows local users to obtain sensitive information by readin…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00336 Published 2006-11-17 No fix listed

Vulnerabilities

Filters

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext…

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow…

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3)…