Vulnerabilities

TI-2008-05551 CVE-2008-5855 · GHSA-rw6m-vgvc-h948

myPHPscripts Login Session 2.0 stores sensitive information under the web root with…

LOW 28

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct req…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2009-01-06 No fix listed CWE-264

TI-2008-05550 CVE-2008-5854 · GHSA-jg9c-x93h-p57v

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ls_user and (2) ls_email parameters (aka the Us…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2009-01-06 No fix listed CWE-79

Vulnerabilities

Filters

myPHPscripts Login Session 2.0 stores sensitive information under the web root with…

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login…