phpTransformer vulnerabilities
CVEs whose affected-version data names the phpTransformer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2019-25579High· 7.5PoCphpTransformer 2016.9 Directory Traversal via jQueryFileUpload
phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can send requests to the jQueryFileUploadmaster server endpo…
▾ MidnightPhptransformer · phpTransformerEPSS 1.1%via CVEORG
CVE-2019-25578High· 8.2PoCphpTransformer 2016.9 SQL Injection via GeneratePDF.php
phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter. Attackers can send crafted GET requests to GeneratePDF.…
▾ MidnightPhptransformer · phpTransformerEPSS 0.38%via CVEORG