← Back

Ryneezy

ryneezy

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Phosheezy
phosheezy
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0275
1Ryneezy
1Phosheezy
Apr 23, 2026
Jan 26, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited...Show more
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2009-0251
1Ryneezy
1Phosheezy
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited...Show more
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0250
1Ryneezy
1Phosheezy
Apr 23, 2026
Jan 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request...Show more
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password.Show less