Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability CVE-2008-3032, GHSA-pm5m-9h5r-xcrg | Medium | 1.0% | 07 Jul, 2008 | Packagist mehrwert/phpmyadmin |
TYPO3 Unrestricted File Upload vulnerability CVE-2008-2717, GHSA-f35p-hcwf-9f9f | Medium | 3.0% | 16 Jun, 2008 | Packagist typo3/cms-core |
Moodle vulnerable to Cross-site scripting CVE-2008-1502, GHSA-v759-3wr5-p294 | Medium | 10.5% | 25 Mar, 2008 | Packagist moodle/moodle |
Joomla! vulnerable to CRLF injection CVE-2007-4190, GHSA-h22q-g2c7-2jwj | Medium | 1.7% | 08 Aug, 2007 | Packagist joomla/application |
HTML Purifier Cross-site Scripting vulnerability CVE-2007-3498, GHSA-6fh7-fwqj-mv49 | Medium | 1.0% | 29 Jun, 2007 | Packagist ezyang/htmlpurifier |
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files CVE-2006-5031, GHSA-rw73-xmpv-j5x2 | Medium | 7.7% | 27 Sep, 2006 | Packagist cakephp/cakephp |
Cross-site scripting (XSS) vulnerability in CakePHP CVE-2006-4067, GHSA-vc29-mvwv-wpcq | Medium | 1.2% | 10 Aug, 2006 | Packagist cakephp/cakephp |
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence CVE-2006-3360, GHSA-2wxv-3g4v-p76p | Medium | 5.6% | 06 Jul, 2006 | Packagist phpsysinfo/phpsysinfo |
phpMyAdmin CRLF Injection Vulnerability CVE-2005-3621, GHSA-wj42-52pv-wfj2 | Medium | 1.6% | 16 Nov, 2005 | Packagist phpmyadmin/phpmyadmin |