2 matches found
Cross site scripting
XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...
4.3CVSS5.9AI score0.01455EPSS
SaveExploits1References5Affected Software1
CVE-2017-0378: Improper Neutralization of Input During Web Page Generation
XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...
6.1CVSS5.8AI score0.01455EPSS
SaveExploits1References2
20