Vulnerabilities

TI-2021-19530 CVE-2021-43698 · GHSA-mg5m-225h-2mpp

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS)…

LOW 28

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00628 Published 2021-11-29 No fix listed CWE-79

TI-2015-04403 CVE-2015-5243 · GHSA-c95f-27gx-6vq9

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

MEDIUM 51

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06195 Published 2018-08-20 Fixed in 5.1.0 CWE-94

TI-2015-03379 CVE-2015-3998 · GHSA-5w4g-3x58-7xv5

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the…

LOW 29

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01117 Published 2017-05-17 No fix listed CWE-79

Vulnerabilities

Filters

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS)…

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the…