Vulnerabilities

TI-2011-00342 CVE-2011-0407 · GHSA-442c-c4xc-v7x8

SQL injection vulnerability in the store function in…

LOW 35

SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0115 Published 2011-01-11 No fix listed CWE-89

TI-2009-03380 CVE-2009-3543 · GHSA-w595-w6qf-w9r3

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9…

LOW 37

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02002 Published 2009-10-02 No fix listed CWE-89

TI-2009-02811 CVE-2009-2951 · GHSA-vxrr-hhh6-m2mm

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which…

LOW 34

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00616 Published 2009-08-24 No fix listed CWE-310

Vulnerabilities

Filters

SQL injection vulnerability in the store function in…

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9…

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which…