Advisories · Technology
ph7software ph7builder.
Every CVE that names ph7software ph7builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
- ph7software ph7builder
- Hard-coded credentials
- CVSS 7.1 High
pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController
- ph7software ph7builder
- Hard-coded credentials
- CVSS 6.9 Medium
pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID
- ph7software ph7builder
- CWE-807
- CVSS 7.2 High
pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
- ph7software ph7builder
- Path traversal
- CVSS 7.6 High
pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php
- ph7software ph7builder
- Authentication bypass
- CVSS 5.3 Medium
pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
- ph7software ph7builder
- Broken access control
- CVSS 7.1 High
pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController
- ph7software ph7builder
- CWE-472