Aphpkb

Aphpkb

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2013-7289

  • EPSS 0.31%
  • Veröffentlicht 10.01.2014 16:47:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username par...

4.3

CVE-2013-7277

Exploit
  • EPSS 0.35%
  • Veröffentlicht 08.01.2014 15:30:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to saa.php, (2) username parameter to login.php, or (...

7.5

CVE-2011-1546

Exploit
  • EPSS 0.88%
  • Veröffentlicht 04.04.2011 12:27:38
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated adminis...

6.8

CVE-2011-1555

  • EPSS 0.39%
  • Veröffentlicht 04.04.2011 12:27:38
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details...

6.8

CVE-2011-1556

Exploit
  • EPSS 1.14%
  • Veröffentlicht 04.04.2011 12:27:38
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

6.8

CVE-2008-6513

  • EPSS 2.62%
  • Veröffentlicht 24.03.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.p...