Phpizabi - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2008-08-20.

Products

• Phpizabi - 4 CVEs

Newest CVEs of Phpizabi

• CVE-2008-3735 - CVSS 4.3 (medium), 2008-08-20: Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-3723 - CVSS 6.3 (medium), 2008-08-20: Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot…
• CVE-2008-3239 - CVSS 9.3 (critical), 2008-07-21: Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled,…
• CVE-2008-2018 - CVSS 4 (medium), 2008-04-30: The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters,…