powerphlogger powerphlogger vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and previous versions allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action.

Powerphlogger Powerphlogger 2.0.9 Powerphlogger Powerphlogger 2.2.1 Powerphlogger Powerphlogger 2.2.2a Powerphlogger Powerphlogger

1 EDB exploit

NA

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 up to and including 2.2.2 allows remote malicious users to execute arbitrary PHP code via the rel_path parameter.

Powerphlogger Powerphlogger 2.0.9 Powerphlogger Powerphlogger 2.2.1 Powerphlogger Powerphlogger 2.2.2a

1 EDB exploit

NA

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the rel_path parameter.

Powerphlogger Powerphlogger

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote malicious users to inject arbitrary web script or HTML via the edit parameter.

Phpee Pphlogger 2.2.5

1 EDB exploit

NA

PowerPhlogger 2.2.5 allows remote malicious users to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.inc.php, and (7) pphlogger_send.inc.php in include/, whi...

Phpee Pphlogger 2.2.5

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook