Vulnerabilities

TI-2015-03938 CVE-2015-4713 · GHSA-8gjr-627j-42qx

SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute…

LOW 31

SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01137 Published 2015-06-22 No fix listed CWE-89

TI-2010-04604 CVE-2010-4881 · GHSA-w3g5-m74v-6h4q

Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authentication of unspecified victims for requests that use the (1) cate…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00639 Published 2011-10-07 No fix listed CWE-352

TI-2010-04603 CVE-2010-4880 · GHSA-h9c9-vxf6-2qqg

Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) category_description, (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01089 Published 2011-10-07 No fix listed CWE-79

TI-2010-03311 CVE-2010-3481 · GHSA-w6v4-7gww-w8wm

Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when…

LOW 32

Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) password variable…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01117 Published 2010-09-22 No fix listed CWE-89

TI-2010-03310 CVE-2010-3480 · GHSA-g3jm-cg9g-h67v

Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when…

LOW 35

Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02367 Published 2010-09-22 No fix listed CWE-22