Vulnerabilities > Php121
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-04-10 | CVE-2007-1908 | Local File Include vulnerability in PHP121 Instant Messenger 2.2 PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function. network php121 | 6.8 |
| 2006-04-19 | CVE-2006-1828 | SQL Injection vulnerability in PHP121 PHP121LOGIN.PHP SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. | 5.1 |