Vulnerabilities

TI-2008-04541 CVE-2008-4758 · GHSA-878p-p7jh-q3m2

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote…

LOW 28

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02832 Published 2008-10-28 No fix listed CWE-22

TI-2008-04540 CVE-2008-4757 · GHSA-v86p-cwf8-m378

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) add_postit.php (b) delete.php, and (c) mod_prest_date.php; and the (2) prev par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-10-28 No fix listed CWE-89

TI-2008-04539 CVE-2008-4756 · GHSA-274q-pmx6-2j27

Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2008-10-28 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote…

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute…

Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote…