Login Request a demo
AP
Product
Apache2triad
by Apache2triad · last CVE Aug 23, 2017
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities4Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache2triad to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12965
9.8
16%
Aug 23
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter
Affected: 1.5.4
CVE-2017-12970
8.8
2%
Aug 23
Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2)…
Affected: 1.5.4
CVE-2017-12971
6.1
3%
Aug 23
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php
Affected: 1.5.4
CVE-2006-0144
–
2%
Jan 9
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious…
Affected: All versions, or not specified
Showing 4