Phpyun is a recruitment management system focused on job board and staffing workflows, with its vulnerability profile centered on the core Phpyun product. The recurring weaknesses—including path traversal, SQL injection, and incomplete flaw characterization—reflect input-handling and access-control deficiencies typical of web-based recruitment platforms; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Phpyun over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4796HIGH Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e paramet | Apr 27, 2011 | 7.5 | 25 | NO | NO |
CVE-2018-18713HIGH The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql& | Oct 29, 2018 | 7.5 | 24 | NO | NO |
CVE-2018-18626HIGH An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() | Oct 23, 2018 | 7.5 | 24 | NO | NO |
CVE-2020-23768HIGH An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vul | May 21, 2021 | 7.5 | 22 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Phpyun.
Media articles that mention a CVE ID that affects a product developed by Phpyun — matched by CVE ID, not by vendor name.