CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0 Last 7 days 2,759 Total CVEs 401,121 CISA KEV 1,731 Critical 42,393 All stats

Page 1

CVE-2009-2147 HIGH

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 7.5 EPSS 2.04% Jun 22, 2009

CVE-2009-2081 MEDIUM

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary f…

CVSS 4.3 EPSS 2.52% Jun 16, 2009

CVE-2007-3141 MEDIUM

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_…

CVSS 6.8 EPSS 1.97% Jun 11, 2007

CVE-2006-6042 MEDIUM

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remote attackers to exec…

CVSS 6.8 EPSS 5.87% Nov 22, 2006

CVE-2005-4226 HIGH

Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref p…

CVSS 7.5 EPSS 3.22% Dec 14, 2005

CVE-2005-4218 HIGH

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulne…

CVSS 7.5 EPSS 2.43% Dec 14, 2005

CVE-2005-3676 HIGH

SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.

CVSS 7.5 EPSS 1.16% Nov 18, 2005

CVE-2005-3585 HIGH

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.

CVSS 7.5 EPSS 2.09% Nov 16, 2005

CVE-2005-3584 MEDIUM

Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parame…

CVSS 4.3 EPSS 1.39% Nov 16, 2005

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2009-2147	SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.	HIGH	7.5	2.04%	Jun 22, 2009
CVE-2009-2081	Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary f…	MEDIUM	4.3	2.52%	Jun 16, 2009
CVE-2007-3141	PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_…	MEDIUM	6.8	1.97%	Jun 11, 2007
CVE-2006-6042	PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remote attackers to exec…	MEDIUM	6.8	5.87%	Nov 22, 2006
CVE-2005-4226	Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref p…	HIGH	7.5	3.22%	Dec 14, 2005
CVE-2005-4218	SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulne…	HIGH	7.5	2.43%	Dec 14, 2005
CVE-2005-3676	SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.	HIGH	7.5	1.16%	Nov 18, 2005
CVE-2005-3585	SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.	HIGH	7.5	2.09%	Nov 16, 2005
CVE-2005-3584	Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parame…	MEDIUM	4.3	1.39%	Nov 16, 2005

Rows per page

Showing 1 to 9 CVEs · page 1