Phpwebthings

9 CVEs across 1 Phpwebthings products. Browse Phpwebthings vulnerabilities, severities, and proof-of-concept exploits.

Phpwebthings products with known CVEs

ProductCVEs
Phpwebthings9
Phpwebthings CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-21472009-06-22SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2009-20812009-06-16Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary f…
CVE-2007-31412007-06-11PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_…
CVE-2006-60422006-11-22PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remote attackers to exec…
CVE-2005-42262005-12-14Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref p…
CVE-2005-42182005-12-14SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulne…
CVE-2005-36762005-11-18SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.
CVE-2005-35852005-11-16SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.
CVE-2005-35842005-11-16Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parame…