⌘ + K

Php Jackknife

Dashboard / Vendors

Products: 1

Vulnerabilities: 4

Known Exploited: 0

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Vulnerabilities

100806040200

JanFebMarAprMayJunJulAugSepOctNovDec

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Products Security index

Actions

Php Jackknife

Application

Items Per Page

Vulnerabilities

CVE-2007-3000

Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to Search/DisplayResults.php.

Last Modified: Apr 23, 2026

Published: Jun 04, 2007

CVE-2007-3002

PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the iParentUnq[] parameter, or a request to G_Display.php with an invalid (2) iCategoryUnq[] or (3) sSort[] array parameter, which reveals the path in various error messages.

Last Modified: Apr 23, 2026

Published: Jun 04, 2007

CVE-2007-3001

Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML via (1) the sUName parameter to UserArea/Authenticate.php, (2) the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the (3) iCategoryUnq, (4) iDBLoc, (5) iTtlNumItems, (6) iNumPerPage, or (7) sSort parameter to G_Display.php, different vectors than CVE-2005-4239.

Last Modified: Apr 23, 2026

Published: Jun 04, 2007

CVE-2005-4239

Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter.

Last Modified: Apr 16, 2026

Published: Dec 14, 2005

Items Per Page