Browse CVEs

HIGH 8.8 CVE-2016-10758 PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_na… Phpkit No fix yet Fix from $1,9502019-05-24 MEDIUM 6.8 CVE-2008-7193 PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading th… Phpkit Mitigation only Fix from $1,6002009-09-09 HIGH 7.5 CVE-2007-6134 SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contenti… Phpkit Patch available Fix from $1,9502007-11-27 HIGH 7.5 CVE-2006-7115 SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when … Phpkit No fix yet Fix from $1,9502007-03-06 HIGH 7.5 CVE-2007-0179 SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parameter. Phpkit No fix yet Fix from $1,9502007-01-11 MEDIUM 6.4 CVE-2006-1773 SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the co… Phpkit after 1.6.1 Fix from $1,6002006-04-13 MEDIUM 6.8 CVE-2006-1507 Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to i… Phpkit No fix yet Fix from $1,6002006-03-30 MEDIUM 6.4 CVE-2006-0785 Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute arbitrary l… Phpkit after 1.6.1 Fix from $1,6002006-02-19 MEDIUM 5.1 CVE-2006-0786 Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to con… Phpkit after 1.6.1 Fix from $1,6002006-02-19 MEDIUM 6.5 CVE-2005-4424 Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot d… Phpkit Mitigation only Fix from $1,6002005-12-20 HIGH 7.5 CVE-2005-3553 Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the… Phpkit after 1.6.1 Fix from $1,9502005-11-16 MEDIUM 5.1 CVE-2005-3554 Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers… Phpkit No fix yet Fix from $1,6002005-11-16 HIGH 7.5 CVE-2005-2683 Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to login… Phpkit No fix yet Fix from $1,9502005-08-23 HIGH 7.5 CVE-2004-1538 SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parame… Phpkit No fix yet Fix from $1,9502004-12-31 MEDIUM 6.8 CVE-2003-1187 Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML vi… Phpkit No fix yet Fix from $1,6002003-11-02