Php Web - vulnerabilities (CVEs)
4 CVEs in 1 products, 0 in the last 30 days, newest from 2005-12-05.
Products
- Statistik - 4 CVEs
Newest CVEs of Php Web
- CVE-2005-4013 - CVSS 5 (medium), 2005-12-05: PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive…
- CVE-2005-4012 - CVSS 4.3 (medium), 2005-12-05: Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the…
- CVE-2005-4015 - CVSS 5 (medium), 2005-12-05: PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large…
- CVE-2005-4014 - CVSS 7.8 (high), 2005-12-05: stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.