Vulnerabilities > Phpuploader Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-02-24 | CVE-2022-23986 | SQL Injection vulnerability in PHPuploader Project PHPuploader SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors. | 7.5 |
| 2022-02-24 | CVE-2022-24435 | Cross-site Scripting vulnerability in PHPuploader Project PHPuploader Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. | 6.1 |