Vulnerabilities

TI-2007-01930 CVE-2007-2008 · GHSA-5pr6-chwj-gjpq

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers…

LOW 37

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02435 Published 2007-04-12 No fix listed

TI-2007-01929 CVE-2007-2007 · GHSA-vc9h-qrr4-gm2x

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.

LOW 38

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02663 Published 2007-04-12 No fix listed

TI-2007-01928 CVE-2007-2006 · GHSA-h78v-7wxx-7wmv

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01029 Published 2007-04-12 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers…

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote…