Vulnerabilities > Phamm > Phamm > 0.5.7

DATE CVE VULNERABILITY TITLE RISK
2017-07-20 CVE-2017-0378 Cross-site Scripting vulnerability in Phamm
XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.
network
low complexity
phamm CWE-79
6.1