/index.php vulnerabilities
4 known CVE vulnerabilities in /index.php, translated and rated.
- CVE-2023-41364Critical
In versions of tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
- CVE-2023-4112Medium
A vulnerability was found in PHP Jabbers Shuttle Booking Software version 1.0 that leads to cross-site scripting (XSS) attacks through manipulation of the /index.php file. The attack can be initiated remotely.
- CVE-2017-8297Critical
A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole 'Simple PHP File Manager' component).
- CVE-2023-3685Low
A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1 related to the manipulation of the 'page' argument in the /index.php file, leading to cross-site scripting attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS