Ph7software Ph7builder vulnerabilities
- ph7software ph7builder pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header 8.7 High
- ph7software ph7builder pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController 7.1 High
- ph7software ph7builder pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID 6.9 Medium
- ph7software ph7builder pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link 7.2 High
- ph7software ph7builder pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php 7.6 High
- ph7software ph7builder pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action 5.3 Medium
- ph7software ph7builder pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController 7.1 High