Myphpim - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2006-01-11.

Products

• Myphpim - 3 CVEs

Newest CVEs of Myphpim

• CVE-2006-0168 - CVSS 4.3 (medium), 2006-01-11: Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the…
• CVE-2006-0167 - CVSS 7.5 (high), 2006-01-11: SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the…
• CVE-2006-0169 - CVSS 7.5 (high), 2006-01-11: addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then…