Vulnerabilities (CVE)

Filtered by vendor Elijaa Subscribe
Filtered by product Phpmemcachedadmin
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6027 1 Elijaa 1 Phpmemcachedadmin 2024-02-28 N/A 5.4 MEDIUM
A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled entries in the "/pmcadmin/configure.php" parameter.
CVE-2023-6026 1 Elijaa 1 Phpmemcachedadmin 2024-02-28 N/A 9.1 CRITICAL
A Path traversal vulnerability has been reported in elijaa/phpmemcachedadmin affecting version 1.3.0. This vulnerability allows an attacker to delete files stored on the server due to lack of proper verification of user-supplied input.