phphq records
2 published records for vendor phphq.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2007-4527Proof of concept | Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload and execute arbitraryphphq · phuploader | High7.5 | — | 3.2% | Aug 24, 2007 |
31Monitor | CVE-2008-1971Proof of concept | phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by settingphphq · phshoutbox final · CWE-287 | High7.5 | — | 2.2% | Apr 27, 2008 |
- CVE-2007-452731Monitor
Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload and execute arbitrary
HighCVSS 7.5Proof of conceptEPSS 3%phphq · phuploaderAug 24, 2007
- CVE-2008-197131Monitor
phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by setting
HighCVSS 7.5Proof of conceptEPSS 2%phphq · phshoutbox finalApr 27, 2008