Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2021-43698
Disclosure Date: November 29, 2021 (last updated February 23, 2025)
phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is a XSS vulnerability.
0
Attacker Value
Unknown
CVE-2015-5243
Disclosure Date: August 20, 2018 (last updated November 27, 2024)
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.
0
Attacker Value
Unknown
CVE-2015-3998
Disclosure Date: May 17, 2017 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php.
0
