Phpvibe - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2024-07-09.

Products

• Phpvibe - 4 CVEs

Newest CVEs of Phpvibe

• CVE-2024-39171 - CVSS 9.8 (critical), 2024-07-09: Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific…
• CVE-2024-6083 - CVSS 9.8 (critical), 2024-06-18: A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of…
• CVE-2024-6082 - CVSS 6.1 (medium), 2024-06-17: A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file…
• CVE-2015-5399 - CVSS 5.4 (medium), 2016-08-26: Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment.