Filtered by vendor Pl-php
Subscribe
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2007-2006 | 1 Pl-php | 1 Pl-php | 2024-02-04 | 7.5 HIGH | N/A |
| Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass parameter. | |||||
| CVE-2007-2008 | 1 Pl-php | 1 Pl-php | 2024-02-04 | 7.5 HIGH | N/A |
| Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. | |||||
| CVE-2007-2007 | 1 Pl-php | 1 Pl-php | 2024-02-04 | 7.5 HIGH | N/A |
| admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1. | |||||