Phcdownload@1.1 Security Vulnerabilities and Issues — Phcdownload@1.1 CVE List

Lucene search

PhpcredoPhcdownload1.1

4 matches found

CVE•added 2008/01/08 2:46 a.m.•45 views

CVE-2007-6670

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter.

7.5CVSS8.4AI score0.00361EPSS

CVE•added 2008/01/08 2:46 a.m.•39 views

CVE-2007-6669

Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter.

4.3CVSS5.7AI score0.01807EPSS

CVE•added 2009/04/03 6:30 p.m.•35 views

CVE-2008-6597

Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

4.3CVSS5.7AI score0.00138EPSS

CVE•added 2009/04/03 6:30 p.m.•33 views

CVE-2008-6596

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

7.5CVSS8.3AI score0.00142EPSS