Php Labs develops a focused set of web application products including JobSitePro, Profile, Survey Wizard, and Top Auction, where the durable signal centers on application-layer input-handling issues, particularly SQL injection vulnerabilities. Treat this as a compact vendor profile; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Php Labs over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-3952HIGH SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) ce | Dec 1, 2005 | 7.5 | 29 | NO | YES |
CVE-2007-1428HIGH SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter. | Mar 13, 2007 | 7.5 | 28 | NO | YES |
CVE-2005-1233MEDIUM Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters. | Apr 20, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-3951HIGH SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter. | Dec 1, 2005 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Php Labs.
Media articles that mention a CVE ID that affects a product developed by Php Labs — matched by CVE ID, not by vendor name.