İçeriğe atla
Noroxi

php-stats kayıtları

php-stats üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    12 kayıt
    • CVE-2006-7173
      41Planlayın

      Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP c

      KritikCVSS 10,0Kavram kanıtıEPSS %4

      php-stats · php-stats20 Mar 2007

    • CVE-2006-1085
      41Planlayın

      admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbi

      KritikCVSS 10,0İstismar yokEPSS %4

      php-stats · php-stats8 Mar 2006

    • CVE-2007-5452
      41Planlayın

      Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands

      KritikCVSS 10,0Kavram kanıtıEPSS %3

      php-stats · php-stats14 Eki 2007

    • CVE-2007-5453
      35İzleyin

      Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing

      YüksekCVSS 8,5Kavram kanıtıEPSS %4

      php-stats · php-stats14 Eki 2007

    • CVE-2006-7172
      31İzleyin

      Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      php-stats · php-stats20 Mar 2007

    • CVE-2006-1083
      31İzleyin

      Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possibly execute arbitrary

      YüksekCVSS 7,5İstismar yokEPSS %2

      php-stats · php-stats8 Mar 2006

    • CVE-2006-1084
      30İzleyin

      Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the

      YüksekCVSS 7,5İstismar yokEPSS %2

      php-stats · php-stats8 Mar 2006

    • CVE-2006-1087
      27İzleyin

      Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenti

      OrtaCVSS 6,5İstismar yokEPSS %2

      php-stats · php-stats8 Mar 2006

    • CVE-2006-1088
      21İzleyin

      PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request to checktables.php, w

      OrtaCVSS 5,0İstismar yokEPSS %2

      php-stats · php-stats8 Mar 2006

    • CVE-2007-4334
      18İzleyin

      Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML vi

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      php-stats · php-stats14 Ağu 2007

    • CVE-2007-4917
      17İzleyin

      Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      php-stats · php-stats17 Eyl 2007

    • CVE-2008-6212
      17İzleyin

      Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML vi

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      php-stats · php-stats19 Şub 2009