Vulnerabilities

TI-2020-14669 CVE-2020-23768 · GHSA-fxj6-gm5w-8mwr

An information disclosure vulnerability was discovered in alipay_function.php in the log…

LOW 35

An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01025 Published 2021-05-21 No fix listed

TI-2018-13233 CVE-2018-18713 · GHSA-6fm6-9mv4-9wgf

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows…

LOW 37

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02304 Published 2018-10-27 No fix listed CWE-22

TI-2018-13167 CVE-2018-18626 · GHSA-p665-f3mv-m9pp

An issue was discovered in PHPYun V4.6.

LOW 35

An issue was discovered in PHPYun V4.6.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2018-10-23 No fix listed

TI-2010-04519 CVE-2010-4796 · GHSA-9jxx-4x48-3ff9

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01084 Published 2011-04-27 No fix listed CWE-89

Vulnerabilities

Filters

An information disclosure vulnerability was discovered in alipay_function.php in the log…

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows…

An issue was discovered in PHPYun V4.6.

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute…