Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php live php live vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-6769
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) search_string parameter in (a) setup/transcripts.php, the (2) l parameter in (b) index.php, the (3) login f...
Php Live Php LivePhp Live Php Live 2.8.1Php Live Php Live 3.0
NA
CVE-2006-1373
Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote malicious users to inject arbitrary web script or HTML via the base_url parameter.
Php Live Php LivePhp Live Php Live 2.8.1
NA
CVE-2007-3218
Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the pagex parameter.
Php Live Php Live
NA
CVE-2004-2485
Unspecified vulnerability in PHP Live! prior to 2.8.2, due to a "major security problem," allows remote malicious users to include arbitrary files and directories via unspecified attack vectors.
Php Live Php Live
NA
CVE-2006-3911
PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setup/header.php.
Php Live Php Live
NA
CVE-2009-4749
Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote malicious users to execute arbitrary SQL commands via the x parameter to (1) message_box.php and (2) request.php.
Phplivesupport Php Live\\! 3.2.1Phplivesupport Php Live\\! 3.2.2
NA
CVE-2008-3764
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and previous versions allows remote malicious users to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
Turnkeywebtools Php Live Helper 2.0Turnkeywebtools Php Live Helper
NA
CVE-2008-3762
SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.
Turnkeywebtools Php Live Helper 2.0Turnkeywebtools Php Live Helper
NA
CVE-2008-3763
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and previous versions, when register_globals is enabled, allows remote malicious users to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection...
Turnkeywebtools Php Live Helper 2.0Turnkeywebtools Php Live Helper
NA
CVE-2006-4051
PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the abs_path parameter.
Turnkey Web Tools Php Live HelperTurnkey Web Tools Php Live Helper 1.8Turnkey Web Tools Php Live Helper 2.0 Beta
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook