Vulnerabilities

TI-2023-14180 CVE-2023-30212 · GHSA-565m-x34r-mrjv

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

LOW 38

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.08115 Published 2023-04-26 No fix listed CWE-79

TI-2023-14179 CVE-2023-30211 · GHSA-mwpg-w44j-q7xx

MEDIUM 51

OURPHP <= 7.2.0 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00953 Published 2023-04-26 No fix listed CWE-89

TI-2023-14178 CVE-2023-30210 · GHSA-rg7m-x7gx-hg4q

LOW 30

OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01173 Published 2023-04-26 No fix listed CWE-79