CVE Tools
Track your stack

Phpoutsourcing

21 CVEs tracked since 2005. Since Mar 2005, none of them reached CISA KEV.

Phpoutsourcing CVEs per month

Mar 2005 to Nov 2008. Point at a month, or focus the strip and use the arrow keys.
Phpoutsourcing CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0350
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-0820
2005-0920
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-0250
2006-0320
2006-04null or fewer
2006-05null or fewer
2006-0620
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-1020
2006-11null or fewer
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-1110

Products

The products that kept showing up in Phpoutsourcing's monthly top three, with their CVEs summed over those months.

  1. Noahs Classifieds104 months
  2. Zorum104 months
  3. Ideabox11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Phpoutsourcing.

  1. CVE-2008-5199PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter.7.5
  2. CVE-2002-2350Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.4.3
  3. CVE-2006-5431PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter.7.5
  4. CVE-2006-5293Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.6.8
  5. CVE-2006-3332SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6...7.5
  6. CVE-2006-3333Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters, including the (1) frommethod, ...2.6
  7. CVE-2006-1331Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list p...6.8
  8. CVE-2006-1332Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error m...6.4
  9. CVE-2006-0880Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) inf parameter; or, when register...4.3
  10. CVE-2006-0879SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.7.5
  11. CVE-2006-0881Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1)...7.5
  12. CVE-2006-0878Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php.5.0
  13. CVE-2006-0882Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php.5.0
  14. CVE-2005-4619SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.7.5
  15. CVE-2005-2980Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter.4.3

The record

Peak rank
#12 in Feb 2006
Busiest month shown
Mar 2005, 5 CVEs
Months with a KEV entry
0 since Mar 2005
Monthly snapshots
8 since 2005
Phpoutsourcing's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store