Filtered by vendor Phpyun Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-23768 1 Phpyun 1 Phpyun 2024-11-21 7.5 High
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers.
CVE-2018-18713 1 Phpyun 1 Phpyun 2024-11-21 N/A
The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.
CVE-2018-18626 1 Phpyun 1 Phpyun 2024-11-21 N/A
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.
CVE-2010-4796 1 Phpyun 1 Phpyun 2024-11-21 N/A
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.