Phpvibe

Phpvibe

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-39171

Exploit
  • EPSS 0.96%
  • Veröffentlicht 09.07.2024 17:15:48
  • Zuletzt bearbeitet 21.11.2024 09:27:16

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

9.8

CVE-2024-6083

  • EPSS 0.14%
  • Veröffentlicht 18.06.2024 00:15:09
  • Zuletzt bearbeitet 21.11.2024 09:48:55

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted...

6.1

CVE-2024-6082

  • EPSS 0.11%
  • Veröffentlicht 17.06.2024 23:15:51
  • Zuletzt bearbeitet 21.11.2024 09:48:55

A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-log...

5.4

CVE-2015-5399

Exploit
  • EPSS 0.23%
  • Veröffentlicht 26.08.2016 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment.