Php-post (David Bennett) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2006-09-19. Vendor: David Bennett.

CVEs of Php-post

• CVE-2006-4880 - CVSS 5 (medium), 2006-09-19: David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2)…
• CVE-2006-4879 - CVSS 7.5 (high), 2006-09-19: SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-4878 - CVSS 5 (medium), 2006-09-19: Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local…
• CVE-2006-4881 - CVSS 4.3 (medium), 2006-09-19: Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or…
• CVE-2006-4877 - CVSS 5 (medium), 2006-09-19: Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via…