Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
php php 2.0 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2013-1643
The SOAP parser in PHP prior to 5.3.23 and 5.4.x prior to 5.4.13 allows remote malicious users to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the ...
Php Php 4.3.9
Php Php 4.4.9
Php Php 3.0
Php Php
Php Php 5.2.9
Php Php 4.0
Php Php 3.0.5
Php Php 3.0.11
Php Php 5.3.10
Php Php 5.1.5
Php Php 5.3.6
Php Php 5.3.9
Php Php 5.1.2
Php Php 5.3.1
Php Php 4.2.0
Php Php 5.1.1
Php Php 3.0.1
Php Php 5.3.18
Php Php 5.2.14
Php Php 3.0.2
Php Php 4.4.4
Php Php 5.0.0
5.1
CVSSv2
CVE-2006-5762
PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: this issue was later reported for the "File Upload System"...
Free Php Scripts Free File Hosting
Free Php Scripts Free Image Hosting 2.0
1 EDB exploit
5.1
CVSSv2
CVE-2006-5763
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter to (1) login.php, (2) register.php, or (3) send....
Free Php Scripts Free File Hosting
Free Php Scripts Free Image Hosting 2.0
2 EDB exploits
7.5
CVSSv2
CVE-2008-2457
SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter.
Bitmixsoft Php-jokesite 2.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-4051
PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the abs_path parameter.
Turnkey Web Tools Php Live Helper 2.0 Beta
Turnkey Web Tools Php Live Helper
Turnkey Web Tools Php Live Helper 1.8
1 EDB exploit
7.5
CVSSv2
CVE-2007-1715
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and ...
Free Php Scripts Free Image Hosting 2.0
Free Php Scripts Free Image Hosting 1.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-2098
PHP remote file inclusion vulnerability in Thumbnail AutoIndex prior to 2.0 allows remote malicious users to execute arbitrary PHP code via (1) README.html or (2) HEADER.html.
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.3
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.2.1
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.4
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.2.4
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.2
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.0
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.2.3
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.2.2
Php Thumbnail Autoindex Php Thumbnail Autoindex 1.1
7.5
CVSSv2
CVE-2008-2565
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and previous versions allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.
Php-address Book Php-address Book 2.0
Php-address Book Php-address Book 3.4.8
Php-address Book Php-address Book 2.2
Php-address Book Php-address Book 3.4.4
Php-address Book Php-address Book 2.4
Php-address Book Php-address Book 3.4.1
Php-address Book Php-address Book 3.1
Php-address Book Php-address Book 3.1.2
Php-address Book Php-address Book 1.2
Php-address Book Php-address Book 3.4.2
Php-address Book Php-address Book 3.3.17
Php-address Book Php-address Book
Php-address Book Php-address Book 3.4.7
Php-address Book Php-address Book 2.1
Php-address Book Php-address Book 3.1.5
Php-address Book Php-address Book 3.1.1
Php-address Book Php-address Book 3.1.3
Php-address Book Php-address Book 3.0
Php-address Book Php-address Book 3.3.16
Php-address Book Php-address Book 3.1.4
Php-address Book Php-address Book 3.3.18
Php-address Book Php-address Book 3.4.3
3 EDB exploits
2.1
CVSSv2
CVE-2006-4190
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation.
Php-nuke Autohtml Module 2.0
1 EDB exploit
NA
CVE-2023-3538
A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remo...
Simplephpscripts Photo Gallery Php 2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28995
CVE-2024-36680
CVE-2024-35537
unauthorized
CVE-2024-21518
CVE-2024-37673
cross-site scripting
SSRF
CVE-2024-6241
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »