Search vulnerabilities

Results 2

Export CSV
CVE-2017-0378

XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2018-20806

Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products