Skip to content
OpenAdvisories

Vendor

Phptransformer

2 known vulnerabilities.

Products

phpTransformer 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-25579

    phpTransformer 2016.9 Directory Traversal via jQueryFileUpload

    phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can send requests to the jQueryFileUploadmaster server endpoint with traversal seq…

    Phptransformer phpTransformer
  • High 8.2
    CVE-2019-25578

    phpTransformer 2016.9 SQL Injection via GeneratePDF.php

    phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter. Attackers can send crafted GET requests to GeneratePDF.php with SQL payloads …

    Phptransformer phpTransformer