Zoneo Soft

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-2926 Apr 14, 14:59 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Phptraffica Zoneo Soft

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2014-8340 Dec 16, 18:59 HIGH POC This Week

SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Phptraffica Zoneo Soft

NVD

CVSS 2.0

7.5

EPSS

0.3%

CVE-2015-2926

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP XSS Phptraffica +1

NVD

CVE-2014-8340

EPSS 0% CVSS 7.5

HIGH POC This Week

PHP SQLi Phptraffica +1

NVD