Skip to content
Noroxi

php web records

4 published records for vendor php web.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      4 records
      • CVE-2005-4014
        32Monitor

        stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.

        HighCVSS 7.8No exploitEPSS 2%

        php web · statistikDec 5, 2005

      • CVE-2005-4013
        20Monitor

        PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain

        MediumCVSS 5.0No exploitEPSS 2%

        php web · statistikDec 5, 2005

      • CVE-2005-4015
        20Monitor

        PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log

        MediumCVSS 5.0No exploitEPSS 1%

        php web · statistikDec 5, 2005

      • CVE-2005-4012
        18Monitor

        Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML

        MediumCVSS 4.3No exploitEPSS 2%

        php web · statistikDec 5, 2005