debian/libphp-snoopy vulnerabilities

Latest debian/libphp-snoopy CVEs

Newest publication first

1. CVE-2014-5008 Snoopy allows remote attackers to execute arbitrary commands.

   Published 2017-03-31

   Critical·CVSS 9.8

   Snoopy allows remote attackers to execute arbitrary commands.

2. CVE-2008-7313 The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

   Published 2017-03-31

   Critical·CVSS 9.8

   The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

3. DLA-357-1 libphp-snoopy - security update

   Published 2015-11-30

   Unknown

4. DSA-3248-1 libphp-snoopy - security update

   Published 2015-05-02

   Unknown

5. CVE-2008-4796 The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other pr...

   Published 2008-10-30

   High·CVSS 10.0

   The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metachar...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.