Skip to content
Noroxi

linpha records

12 published records for vendor linpha.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    12 records
    • CVE-2007-4053
      31Monitor

      SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL comma

      HighCVSS 7.5Proof of conceptEPSS 3%

      linpha · linphaJul 30, 2007

    • CVE-2004-2066
      30Monitor

      SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication v

      HighCVSS 7.5No exploitEPSS 1%

      linpha · linphaJul 29, 2004

    • CVE-2006-1924
      25Monitor

      SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown ve

      MediumCVSS 6.4No exploitEPSS 1%

      linpha · linphaApr 20, 2006

    • CVE-2006-1923
      23Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 5.8No exploitEPSS 1%

      linpha · linphaApr 20, 2006

    • CVE-2006-0713
      21Monitor

      Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via ..

      MediumCVSS 5.0Proof of conceptEPSS 3%

      linpha · linphaFeb 15, 2006

    • CVE-2008-1856
      21Monitor

      plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuratio

      MediumCVSS 5.1Proof of conceptEPSS 3%

      linpha · linphaApr 16, 2008

    • CVE-2011-3753
      20Monitor

      LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat

      MediumCVSS 5.0No exploitEPSS 1%

      linpha · linphaSep 23, 2011

    • CVE-2008-7223
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 1%

      linpha · linphaSep 14, 2009

    • CVE-2008-6571
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HT

      MediumCVSS 4.3No exploitEPSS 1%

      linpha · linphaMar 31, 2009

    • CVE-2008-1487
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 1%

      linpha · linphaMar 24, 2008

    • CVE-2014-7265
      17Monitor

      Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

      MediumCVSS 4.3No exploitEPSS 1%

      linpha · linphaDec 12, 2014

    • CVE-2006-1848
      10Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script

      LowCVSS 2.6No exploitEPSS 1%

      linpha · linphaApr 19, 2006