Phpkit - vulnerabilities (CVEs)
20 CVEs in 1 products, 0 in the last 30 days, newest from 2019-05-24.
Products
- Phpkit - 20 CVEs
Newest CVEs of Phpkit
- CVE-2016-10758 - CVSS 8.8 (high), 2019-05-24: PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name…
- CVE-2015-1052 - CVSS 4.3 (medium), 2015-01-15: Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2008-7193 - CVSS 6.8 (medium), 2009-09-09: PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the…
- CVE-2007-6134 - CVSS 7.5 (high), 2007-11-27: SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid…
- CVE-2006-7115 - CVSS 7.5 (high), 2007-03-06: SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path…
- CVE-2007-0179 - CVSS 7.5 (high), 2007-01-11: SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parameter.
- CVE-2006-1773 - CVSS 6.4 (medium), 2006-04-13: SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid…
- CVE-2006-1507 - CVSS 6.8 (medium), 2006-03-30: Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to…
- CVE-2006-0786 - CVSS 5.1 (medium), 2006-02-19: Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP…
- CVE-2006-0785 - CVSS 6.4 (medium), 2006-02-19: Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute arbitrary local…
- CVE-2005-4424 - CVSS 6.5 (medium), 2005-12-20: Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in…
- CVE-2005-3552 - CVSS 4.3 (medium), 2005-11-16: Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple…
- CVE-2005-3554 - CVSS 5.1 (medium), 2005-11-16: Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to…
- CVE-2005-3553 - CVSS 7.5 (high), 2005-11-16: Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id…
- CVE-2005-2699 - CVSS 4.6 (medium), 2005-08-26: Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by…
- CVE-2005-2683 - CVSS 7.5 (high), 2005-08-23: Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to…
- CVE-2004-1879 - CVSS 4.3 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages.
- CVE-2004-1538 - CVSS 7.5 (high), 2004-12-31: SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2004-1537 - CVSS 4.3 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img…
- CVE-2003-1187 - CVSS 6.8 (medium), 2003-11-02: Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the…
