PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.
Vendor
php-survey vulnerabilities
1 published CVE affecting php-survey, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest php-survey CVEs
Newest publication first
-
MediumCVSS 5.0 EPSS 2.4%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.