Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2021-43698
Disclosure Date: November 29, 2021 (last updated February 23, 2025)
phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is a XSS vulnerability.
0
Attacker Value
Unknown
CVE-2015-5243
Disclosure Date: August 20, 2018 (last updated November 27, 2024)
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.
0
Attacker Value
Unknown
CVE-2015-3998
Disclosure Date: May 17, 2017 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php.
0
Attacker Value
Unknown
CVE-2011-0765
Disclosure Date: April 10, 2011 (last updated October 04, 2023)
Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privileges via a crafted command line.
0
