phpprofiles records

5 published records for vendor phpprofiles.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2008-1051Proof of concept	PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary phpprofiles · phpprofiles · CWE-94 pre-auth RCE	Medium6.8	—	21.4%	Feb 27, 2008
33Monitor	CVE-2006-6740Proof of concept	Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code viphpprofiles · phpprofiles · CWE-94 pre-auth RCE	High7.5	—	9.5%	Dec 26, 2006
29Monitor	CVE-2006-5634Proof of concept	Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL inphpprofiles · phpprofiles · CWE-94 pre-auth RCE	Medium6.8	—	6.2%	Oct 31, 2006
18Monitor	CVE-2006-6743No exploit	phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or dephpprofiles · phpprofiles	Medium4.6	—	0.3%	Dec 26, 2006
8Monitor	CVE-2006-6744No exploit	phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write diphpprofiles · phpprofiles	Low2.1	—	0.5%	Dec 26, 2006

CVE-2008-1051
33Monitor
PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary
MediumCVSS 6.8Proof of conceptEPSS 21%
- pre-auth RCE
phpprofiles · phpprofiles Feb 27, 2008
CVE-2006-6740
33Monitor
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code vi
HighCVSS 7.5Proof of conceptEPSS 10%
- pre-auth RCE
phpprofiles · phpprofilesDec 26, 2006
CVE-2006-5634
29Monitor
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in
MediumCVSS 6.8Proof of conceptEPSS 6%
- pre-auth RCE
phpprofiles · phpprofilesOct 31, 2006
CVE-2006-6743
18Monitor
phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or de
MediumCVSS 4.6No exploitEPSS 0%
phpprofiles · phpprofilesDec 26, 2006
CVE-2006-6744
8Monitor
phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write di
LowCVSS 2.1No exploitEPSS 0%
phpprofiles · phpprofilesDec 26, 2006