Phamm

phamm

Vendor: Phamm • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-20806 1Phamm 1Phamm Nov 21, 2024 Mar 17, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
CVE-2017-0378 1Phamm 1Phamm May 13, 2026 Jul 20, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.