Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-3981) CVE-2014-3981 CWE-59 CWE-59 Low PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-5459) CVE-2014-5459 CWE-59 CWE-59 Low PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-0208) CVE-2006-0208 CWE-707 CWE-707 Low PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5814) CVE-2008-5814 CWE-707 CWE-707 Low PHP Interpretation Conflict Vulnerability (CVE-2025-1217) CVE-2025-1217 CWE-436 CWE-436 Low phpList CVE-2017-20031 Vulnerability (CVE-2017-20031) CVE-2017-20031 Low phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3952) CVE-2012-3952 CWE-707 CWE-707 Low phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-5702) CVE-2016-5702 Low phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3197) CVE-2008-3197 CWE-352 CWE-352 Low phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1924) CVE-2008-1924 CWE-200 CWE-200 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5977) CVE-2007-5977 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6100) CVE-2007-6100 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2960) CVE-2008-2960 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3457) CVE-2008-3457 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-4775) CVE-2008-4775 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2642) CVE-2011-2642 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3591) CVE-2011-3591 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3592) CVE-2011-3592 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4345) CVE-2012-4345 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4579) CVE-2012-4579 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5339) CVE-2012-5339 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-3742) CVE-2013-3742 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4995) CVE-2013-4995 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5001) CVE-2013-5001 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5002) CVE-2013-5002 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1879) CVE-2014-1879 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4348) CVE-2014-4348 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4349) CVE-2014-4349 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4954) CVE-2014-4954 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4955) CVE-2014-4955 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4986) CVE-2014-4986 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5273) CVE-2014-5273 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5274) CVE-2014-5274 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7217) CVE-2014-7217 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8326) CVE-2014-8326 CWE-707 CWE-707 Low phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8960) CVE-2014-8960 CWE-707 CWE-707 Low phpMyAdmin Other Vulnerability (CVE-2006-2031) CVE-2006-2031 Low phpMyFAQ Improper Authorization Vulnerability (CVE-2014-6049) CVE-2014-6049 CWE-285 CWE-285 Low phpMyFAQ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-29196) CVE-2024-29196 CWE-22 CWE-22 Low PHP Numeric Errors Vulnerability (CVE-2006-4486) CVE-2006-4486 Low PHP open_basedir Is Not Configured CWE-664 CWE-664 Low PHP open_basedir is not set CWE-664 CWE-664 Low PHP Other Vulnerability (CVE-2002-0121) CVE-2002-0121 Low PHP Other Vulnerability (CVE-2004-0959) CVE-2004-0959 Low PHP Other Vulnerability (CVE-2005-0596) CVE-2005-0596 Low PHP Other Vulnerability (CVE-2005-3054) CVE-2005-3054 Low PHP Other Vulnerability (CVE-2005-3319) CVE-2005-3319 Low PHP Other Vulnerability (CVE-2006-1014) CVE-2006-1014 Low PHP Other Vulnerability (CVE-2006-1494) CVE-2006-1494 Low PHP Other Vulnerability (CVE-2006-1608) CVE-2006-1608 Low PHP Other Vulnerability (CVE-2006-2563) CVE-2006-2563 Low PHP Other Vulnerability (CVE-2006-2660) CVE-2006-2660 Low PHP Other Vulnerability (CVE-2006-4484) CVE-2006-4484 Low PHP Other Vulnerability (CVE-2006-4625) CVE-2006-4625 Low PHP Other Vulnerability (CVE-2006-7204) CVE-2006-7204 Low PHP Other Vulnerability (CVE-2007-2727) CVE-2007-2727 Low PHP Other Vulnerability (CVE-2012-3450) CVE-2012-3450 Low PHP Other Vulnerability (CVE-2024-9026) CVE-2024-9026 Low PHP Resource Management Errors Vulnerability (CVE-2006-1549) CVE-2006-1549 Low PHP Use After Free Vulnerability (CVE-2020-7068) CVE-2020-7068 CWE-416 CWE-416 Low PHP Use of Externally-Controlled Format String Vulnerability (CVE-2009-0754) CVE-2009-0754 CWE-134 CWE-134 Low Phusion Passenger Other Vulnerability (CVE-2014-1831) CVE-2014-1831 Low Phusion Passenger Other Vulnerability (CVE-2014-1832) CVE-2014-1832 Low Play Framework Data Amplification Vulnerability (CVE-2020-28923) CVE-2020-28923 Low Plone CMS Improper Input Validation Vulnerability (CVE-2013-4199) CVE-2013-4199 CWE-20 CWE-20 Low Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1949) CVE-2011-1949 CWE-707 CWE-707 Low Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5502) CVE-2012-5502 CWE-707 CWE-707 Low PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1481) CVE-2010-1481 CWE-707 CWE-707 Low Possible CSRF (Cross-site request forgery) CWE-352 CWE-352 Low Possible Database Name Disclosure CWE-200 CWE-200 Low Possible sensitive directories CWE-200 CWE-200 Low Possible sensitive files CWE-200 CWE-200 Low Possible SQL Statement in comment CWE-200 CWE-200 Low Possible username or password disclosure CWE-200 CWE-200 Low Possible virtual host found CWE-200 CWE-200 Low 1...9101112 10 / 12
