Vulnerabilities

TI-2009-02126 CVE-2009-2219 · GHSA-5qr4-w8xg-rw2m

Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.ph…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01216 Published 2009-06-25 No fix listed CWE-79

TI-2009-02125 CVE-2009-2218 · GHSA-rrxp-x5qm-57vj

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when…

LOW 33

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01574 Published 2009-06-25 No fix listed CWE-94

TI-2009-02003 CVE-2009-2096 · GHSA-w646-j359-7q63

SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows…

LOW 35

SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0097 Published 2009-06-17 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow…

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when…

SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows…