david bennett php-post vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and previous versions allows remote malicious users to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1,...

David Bennett Php-post

7.5

CVSSv2

SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the user parameter.

David Bennett Php-post

5

CVSSv2

David Bennett PHP-Post (PHPp) 1.0 and previous versions allows remote malicious users to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages.

David Bennett Php-post

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the ...

David Bennett Php-post

1 EDB exploit

5

CVSSv2

Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and previous versions allows remote malicious users to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (...

David Bennett Php-post

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook