GCVE - cpe:2.3:a:aphpkb:aphpkb:0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aphpkb:aphpkb:0.5:*:*:*:*:*:*:*

part: a version: 0.5 update: *

Vendor	Aphpkb (`232e7146-46a6-523f-a0bd-670a38945065`)
Product	Aphpkb (`2c799afe-cdc7-5bce-86b3-2d92eca3eb4c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7289`	vulnerable	2026-06-08 05:05:09.437961	Details available Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter. Published: 2014-01-10T16:00:00.000Z Updated: 2024-09-16T17:03:40.553Z Open on db.gcve.eu Reference links http://sourceforge.net/p/aphpkb/code/91 http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html http://secunia.com/advisories/56228 http://osvdb.org/101466	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7277`	vulnerable	2026-06-08 05:05:09.306882	Details available Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to saa.php, (2) username parameter to login.php, or (3) keyword_list parameter to keysearch.php. Published: 2014-01-08T15:00:00.000Z Updated: 2024-08-06T18:01:20.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/64550 http://osvdb.org/101492 https://www.netsparker.com/critical-xss-vulnerabilities-andy-php-knowledgebase http://sourceforge.net/p/aphpkb/code/91 http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1555`	vulnerable	2026-06-08 04:58:00.408113	Details available SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information. Published: 2011-04-01T21:00:00.000Z Updated: 2024-09-16T18:43:32.408Z Open on db.gcve.eu Reference links http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html http://www.vupen.com/english/advisories/2011/0802 http://secunia.com/advisories/34476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1546`	vulnerable	2026-06-08 04:58:00.293314	Details available Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php. NOTE: some of these details are obtained from third party information. Published: 2011-04-01T21:00:00.000Z Updated: 2024-08-06T22:28:41.754Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/17084/ http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html http://www.vupen.com/english/advisories/2011/0802 http://securityreason.com/securityalert/8168 http://secunia.com/advisories/34476	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.