GCVE - cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*

part: a version: 1.6.02 update: *

Vendor	Phpkit (`34d2628e-0781-5d15-8051-616d3b04b996`)
Product	Phpkit (`ef170745-c48f-5ca2-b443-c4764e1db3b7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-4424`	vulnerable	2026-06-08 04:48:43.784385	Details available Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the path parameter and a %00 at the end of the filename, as demonstrated by an avatar filename ending with .png%00. Published: 2005-12-20T11:00:00.000Z Updated: 2024-08-07T23:46:04.416Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/15354 http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html http://www.osvdb.org/20562 http://secunia.com/advisories/17479 http://www.hardened-php.net/advisory_212005.80.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3554`	vulnerable	2026-06-08 04:48:41.140758	Details available Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables. Published: 2005-11-16T07:37:00.000Z Updated: 2024-08-07T23:17:23.392Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015167 http://www.securityfocus.com/bid/15354 https://exchange.xforce.ibmcloud.com/vulnerabilities/23015 http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html http://www.osvdb.org/20563	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1538`	vulnerable	2026-06-08 04:47:54.488584	Details available SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2005-02-19T05:00:00.000Z Updated: 2024-08-08T00:53:24.103Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/18205 http://www.securityfocus.com/bid/11725 http://marc.info/?l=bugtraq&m=110117116115493&w=2 http://secunia.com/advisories/13262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1537`	vulnerable	2026-06-08 04:47:54.487432	Details available Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter. Published: 2005-02-19T05:00:00.000Z Updated: 2024-08-08T00:53:24.105Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/18204 http://www.securityfocus.com/bid/11725 http://marc.info/?l=bugtraq&m=110117116115493&w=2 http://secunia.com/advisories/13262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1187`	vulnerable	2026-06-08 04:47:23.601663	Details available Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T02:19:46.032Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/13590 http://www.securityfocus.com/bid/8960 http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html http://badwebmasters.net/advisory/017/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phpkit

Notes

PURL mappings

Vulnerability references

Contribute