Skip to content
Noroxi

phpcredo records

6 published records for vendor phpcredo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2006-3525
      30Monitor

      SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to

      HighCVSS 7.5No exploitEPSS 1%

      phpcredo · phcdownloadJul 11, 2006

    • CVE-2007-6670
      30Monitor

      SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string para

      HighCVSS 7.5Proof of conceptEPSS 1%

      phpcredo · phcdownloadJan 7, 2008

    • CVE-2008-6596
      30Monitor

      SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash par

      HighCVSS 7.5Proof of conceptEPSS 1%

      phpcredo · phcdownloadApr 3, 2009

    • CVE-2007-6669
      17Monitor

      Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3Proof of conceptEPSS 1%

      phpcredo · phcdownloadJan 7, 2008

    • CVE-2008-6597
      17Monitor

      Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web scri

      MediumCVSS 4.3Proof of conceptEPSS 1%

      phpcredo · phcdownloadApr 3, 2009

    • CVE-2007-6588
      17Monitor

      Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username

      MediumCVSS 4.3No exploitEPSS 1%

      phpcredo · phcdownloadDec 28, 2007