Domphp is a niche PHP application with a focused vulnerability footprint centered on web application input handling and code generation. Its disclosures recur through weakness classes including SQL injection, path traversal, and code injection, reflecting the parsing and sanitization demands of server-side script execution; vulnerabilities in this class frequently attract public exploit code. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Domphp over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-10037HIGH Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php. | Jan 13, 2015 | 7.5 | 46 | NO | YES |
CVE-2008-0282HIGH SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter. | Jan 15, 2008 | 7.5 | 31 | NO | YES |
CVE-2014-10038HIGH SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter. | Jan 13, 2015 | 7.5 | 28 | NO | YES |
CVE-2008-6064HIGH Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vect | Feb 5, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-0745HIGH Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. | Feb 13, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-0283MEDIUM PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. | Jan 15, 2008 | 6.8 | 28 | NO | YES |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Domphp.
Media articles that mention a CVE ID that affects a product developed by Domphp — matched by CVE ID, not by vendor name.