Vulnerabilities (CVE)

Filtered by vendor Warped Systems Subscribe
Filtered by product Phpxmms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-1053 1 Warped Systems 1 Phpxmms 2024-05-17 10.0 HIGH N/A
Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to (1) phpxmmsb.php or (2) phpxmmst.php. NOTE: this issue has been disputed by a reliable third party, stating that the tcmdp variable is initialized by config.php