Vulnerabilities

TI-2011-03330 CVE-2011-3773 · GHSA-j7qf-p484-q2q5

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a…

LOW 25

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

TI-2007-05901 CVE-2007-6186 · GHSA-cr9x-qjfp-hqhg

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack…

MEDIUM 45

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01239 Published 2007-11-30 No fix listed

TI-2007-05889 CVE-2007-6174 · GHSA-wwj2-hpx3-j824

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a…

MEDIUM 40

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile.

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01476 Published 2007-11-30 No fix listed CWE-264

Vulnerabilities

Filters

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a…

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack…

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a…