Skip to content
Noroxi

phpfaber records

7 published records for vendor phpfaber.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2007-2155
      32Monitor

      Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a ..

      HighCVSS 7.8Proof of conceptEPSS 3%

      phpfaber · topsitesApr 19, 2007

    • CVE-2006-3770
      31Monitor

      Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL c

      HighCVSS 7.5No exploitEPSS 2%

      phpfaber · topsitesJul 24, 2006

    • CVE-2007-5754
      28Monitor

      PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary

      MediumCVSS 6.8Proof of conceptEPSS 2%

      phpfaber · urlinnOct 31, 2007

    • CVE-2006-5626
      18Monitor

      Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on

      MediumCVSS 4.3Proof of conceptEPSS 2%

      phpfaber · phpfaber content management systemOct 31, 2006

    • CVE-2009-4382
      17Monitor

      Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web scr

      MediumCVSS 4.3Proof of conceptEPSS 1%

      phpfaber · phpfaber content management systemDec 22, 2009

    • CVE-2006-3902
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or H

      MediumCVSS 4.3No exploitEPSS 1%

      phpfaber · topsitesJul 27, 2006

    • CVE-2006-1878
      11Monitor

      Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML vi

      LowCVSS 2.6Proof of conceptEPSS 2%

      phpfaber · topsitesApr 20, 2006