phpredisadmin project records

3 published records for vendor phpredisadmin project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-4259No exploit	phpRedisAdmin login.inc.php authHttpDigest wrong operator in string comparisonphpredisadmin project · phpredisadmin · CWE-597 Pre-auth	Critical9.8	—	0.8%	Dec 19, 2022
35Monitor	CVE-2021-4268No exploit	phpRedisAdmin cross-site request forgeryphpredisadmin project · phpredisadmin · CWE-863 Pre-auth Broken access control (IDOR) CSRF	High8.8	—	0.4%	Dec 21, 2022
24Monitor	CVE-2020-27163No exploit	phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.phpredisadmin project · phpredisadmin · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Oct 15, 2020

CVE-2021-4259
39Monitor
phpRedisAdmin login.inc.php authHttpDigest wrong operator in string comparison
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
phpredisadmin project · phpredisadminDec 19, 2022
CVE-2021-4268
35Monitor
phpRedisAdmin cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%
phpredisadmin project · phpredisadminDec 21, 2022
CVE-2020-27163
24Monitor
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
phpredisadmin project · phpredisadminOct 15, 2020