Skip to content
Noroxi

phprpg records

3 published records for vendor phprpg.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2007-6469
      37Monitor

      SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL

      CriticalCVSS 9.3No exploitEPSS 2%

      phprpg · phprpgDec 19, 2007

    • CVE-2007-6484
      27Monitor

      SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter.

      MediumCVSS 6.8No exploitEPSS 1%

      phprpg · phprpgDec 20, 2007

    • CVE-2007-6470
      26Monitor

      phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session I

      MediumCVSS 6.4Proof of conceptEPSS 2%

      phprpg · phprpgDec 19, 2007