Product

debian/php-xajax vulnerabilities

3 published CVES affecting debian/php-xajax, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 3
Critical: 0
High: 0
Medium: 2
Low: 0
Unscored: 1
CISA KEV: 0

Latest debian/php-xajax CVEs

Newest publication first

DSA-1692-1 php-xajax - cross-site scripting
Published 2008-12-27

Unknown
CVE-2007-2740 Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.
Published 2007-05-17

MediumCVSS 6.8 EPSS 1.0%

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.
CVE-2007-2739 Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2007-05-17

MediumCVSS 4.3 EPSS 1.3%

Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/php-xajax vulnerabilities

Latest debian/php-xajax CVEs

DSA-1692-1 php-xajax - cross-site scripting

CVE-2007-2740 Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.

CVE-2007-2739 Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.