Vulnerabilities > Phplinkat

DATE CVE VULNERABILITY TITLE RISK
2008-07-31 CVE-2008-3407 Improper Authentication vulnerability in PHPlinkat 0.1
phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie.
network
low complexity
phplinkat CWE-287
5.0
2008-07-31 CVE-2008-3406 SQL Injection vulnerability in PHPlinkat 0.1
SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
network
low complexity
phplinkat CWE-89
7.5
2002-12-31 CVE-2002-2321 Cross-Site Scripting vulnerability in PHPlinkat 0.1.0
Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter.
network
phplinkat CWE-79
4.3