Phpyun

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-18713 Oct 29, 12:29 HIGH This Week

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Path Traversal Phpyun

NVD

CVSS 3.0

7.5

EPSS

2.3%

CVE-2018-18626 Oct 23, 19:29 HIGH This Week

An issue was discovered in PHPYun V4.6. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Phpyun

NVD

CVSS 3.0

7.5

EPSS

0.9%

CVE-2018-18713

EPSS 2% CVSS 7.5

HIGH This Week

PHP Path Traversal Phpyun

NVD

CVE-2018-18626

EPSS 1% CVSS 7.5

HIGH This Week

An issue was discovered in PHPYun V4.6. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Phpyun

NVD