← All credits

Haluk Baran AKBULUT (CyberMap Group)

7 vulnerability records and advisories credit this contributor.

CVE-2026-108905

pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header

CVE-2026-108904

pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController

CVE-2026-108903

pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

CVE-2026-108902

pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

CVE-2026-107638

pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php

CVE-2026-107636

pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController

CVE-2026-107637

pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action