Vulnerabilities

TI-2024-26199 CVE-2024-39171 · GHSA-fmmx-7c8x-cqv9

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory…

HIGH 75

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01219 Published 2024-07-09 No fix listed CWE-35

TI-2024-05638 CVE-2024-6083 · GHSA-gxqj-2fg2-r9jh

PHPVibe Media Upload Page upload-mp3.php unrestricted upload

LOW 25

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00489 Published 2024-06-17 No fix listed CWE-434

TI-2024-05637 CVE-2024-6082 · GHSA-382m-fgqc-gfhw

PHPVibe Global Options Page functionalities.global.php cross site scripting

LOW 23

A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0036 Published 2024-06-17 No fix listed CWE-79

TI-2015-04541 CVE-2015-5399 · GHSA-4mmw-fwjq-688h

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote…

LOW 28

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01864 Published 2016-08-26 No fix listed CWE-79

Vulnerabilities

Filters

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory…

PHPVibe Media Upload Page upload-mp3.php unrestricted upload

PHPVibe Global Options Page functionalities.global.php cross site scripting

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote…