Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpkit phpkit 1.6.02 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2003-1187
Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote malicious users to inject arbitrary web script or HTML via the contact_email parameter.
Phpkit Phpkit 1.6.02
Phpkit Phpkit 1.6.03
1 EDB exploit
NA
CVE-2005-3554
Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and previous versions, when register_globals is enabled, allow remote malicious users to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables.
Phpkit Phpkit 1.6.02
Phpkit Phpkit 1.6.1
Phpkit Phpkit 1.6.03
NA
CVE-2004-1537
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 up to and including 1.6.1 allows remote malicious users to execute arbitrary web script via the img parameter.
Phpkit Phpkit 1.6.02
Phpkit Phpkit 1.6.03
Phpkit Phpkit 1.6.1
1 EDB exploit
NA
CVE-2005-4424
Directory traversal vulnerability in PHPKIT 1.6.1 R2 and previous versions might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00...
Phpkit Phpkit 1.6.02
Phpkit Phpkit 1.6.1
Phpkit Phpkit 1.6.03
NA
CVE-2004-1538
SQL injection vulnerability in include.php in PHPKIT 1.6.03 up to and including 1.6.1 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Phpkit Phpkit 1.6.02
Phpkit Phpkit 1.6.03
Phpkit Phpkit 1.6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injection
CVE-2024-35894
SQL
CVE-2024-5105
CVE-2014-100005
CVE-2024-35895
unauthorized
CVE-2024-22120
CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started