Phcdownload Security Vulnerabilities and Issues — Phcdownload CVE List

Lucene search

PhpcredoPhcdownload

6 matches found

CVE•added 2008/01/08 2:46 a.m.•45 views

CVE-2007-6670

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter.

7.5CVSS8.4AI score0.00361EPSS

CVE•added 2008/01/08 2:46 a.m.•39 views

CVE-2007-6669

Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter.

4.3CVSS5.7AI score0.01807EPSS

CVE•added 2007/12/28 9:46 p.m.•38 views

CVE-2007-6588

Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

4.3CVSS5.6AI score0.00254EPSS

CVE•added 2006/07/12 12:5 a.m.•36 views

CVE-2006-3525

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

7.5CVSS8.8AI score0.00415EPSS

CVE•added 2009/04/03 6:30 p.m.•35 views

CVE-2008-6597

Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

4.3CVSS5.7AI score0.00138EPSS

CVE•added 2009/04/03 6:30 p.m.•33 views

CVE-2008-6596

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

7.5CVSS8.3AI score0.00142EPSS