Phpcredo

Phcdownload

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-6596

Exploit
  • EPSS 0.96%
  • Veröffentlicht 03.04.2009 18:30:00
  • Zuletzt bearbeitet 16.06.2026 23:02:32

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3

CVE-2008-6597

Exploit
  • EPSS 1.18%
  • Veröffentlicht 03.04.2009 18:30:00
  • Zuletzt bearbeitet 16.06.2026 23:02:32

Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter. NOTE: the provenance of this information is unknown; the details are obtai...

4.3

CVE-2007-6669

Exploit
  • EPSS 1.5%
  • Veröffentlicht 08.01.2008 02:46:00
  • Zuletzt bearbeitet 16.06.2026 22:48:32

Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter.

7.5

CVE-2007-6670

Exploit
  • EPSS 0.97%
  • Veröffentlicht 08.01.2008 02:46:00
  • Zuletzt bearbeitet 16.06.2026 22:48:32

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter.

4.3

CVE-2007-6588

  • EPSS 1.02%
  • Veröffentlicht 28.12.2007 21:46:00
  • Zuletzt bearbeitet 16.06.2026 22:48:23

Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obta...

7.5

CVE-2006-3525

  • EPSS 1.09%
  • Veröffentlicht 12.07.2006 00:05:00
  • Zuletzt bearbeitet 16.06.2026 22:27:14

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.