Apphp

5 CVEs across 3 Apphp products. Browse Apphp vulnerabilities, severities, and proof-of-concept exploits.

Apphp products with known CVEs

ProductCVEs
Apphp Calendar2
Php Microcms2
Hotel Site1
Apphp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2015-47132015-06-22SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
CVE-2010-48812011-10-07Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authenticat…
CVE-2010-48802011-10-07Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script o…
CVE-2010-34812010-09-22Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary…
CVE-2010-34802010-09-22Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute a…