phplibre vulnerabilities

Products

• registrotl 2
• tribunalibre 1

Latest phplibre CVEs

Newest publication first

1. CVE-2006-5314 PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.

   Published 2006-10-17

   High·CVSS 7.5 EPSS 3.2% Public exploit

   PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.

2. CVE-2006-5315 PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter.

   Published 2006-10-17

   High·CVSS 7.5 EPSS 3.2%

   PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter.

3. CVE-2006-5316 registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.

   Published 2006-10-17

   High·CVSS 7.8 EPSS 2.8%

   registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.