Phpids

phpids

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-5021 1Phpids 1Phpids Apr 29, 2026 Dec 29, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
CVE-2011-3781 1Phpids 1Phpids Apr 29, 2026 Sep 24, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain...Show more PHPIDS 0.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/IDS/VersionTest.php and certain other files.Show less
CVE-2007-3580 1Phpids 1Phpids Apr 23, 2026 Jul 5, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script.
CVE-2007-3579 1Phpids 1Phpids Apr 23, 2026 Jul 5, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script.
CVE-2007-3578 1Phpids 1Phpids Apr 23, 2026 Jul 5, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script.
CVE-2007-3577 1Phpids 1Phpids Apr 23, 2026 Jul 5, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) document.referrer; (3) certain use of document.location.hash; (4) certain "window[eval" and similar express...Show more PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) document.referrer; (3) certain use of document.location.hash; (4) certain "window[eval" and similar expressions; (5) certain Function expressions; (6) certain '=' expressions, as demonstrated by a 'whatever="something"' sequence; and (7) certain "with" expressions, which allows remote attackers to inject arbitrary web script.Show less