Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Phpizabi Clear all filters
TI-2008-03101 CVE-2008-3239 · GHSA-53ph-pxh2-3gf4

Unrestricted file upload vulnerability in the writeLogEntry function in…

Priority MEDIUM 48

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05165 Published 2008-07-21 No fix listed CWE-20
TI-2008-01940 CVE-2008-2018 · GHSA-q3v4-8f88-pc47

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe…

Priority LOW 23

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obtain sensitive inform…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02156 Published 2008-04-30 No fix listed CWE-200