Vulnerabilities

TI-2009-00258 CVE-2009-0275 · GHSA-xjmg-vpvm-gr84

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote…

LOW 36

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04527 Published 2009-01-26 No fix listed CWE-94

TI-2009-00234 CVE-2009-0251 · GHSA-cwrj-9f27-p9c8

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote…

LOW 37

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05556 Published 2009-01-22 No fix listed CWE-94

TI-2009-00233 CVE-2009-0250 · GHSA-4q75-8mh4-8w7x

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient…

LOW 32

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06282 Published 2009-01-22 No fix listed CWE-264

Vulnerabilities

Filters

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote…

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote…

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient…