← Back

Phpuploader Project

phpuploader_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Phpuploader
phpuploader
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24435
1Phpuploader Project
1Phpuploader
Jun 17, 2026
Feb 24, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-23986
1Phpuploader Project
1Phpuploader
Jun 17, 2026
Feb 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors.