Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/40132?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40132?format=api",
    "vulnerability_id": "VCID-rrkv-3fw9-k7eq",
    "summary": "Code Injection\nphpWhois allows remote attackers to execute arbitrary code via a crafted whois record.",
    "aliases": [
        {
            "alias": "CVE-2015-5243"
        },
        {
            "alias": "GHSA-c95f-27gx-6vq9"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56207?format=api",
            "purl": "pkg:composer/brightlocal/phpwhois@4.2.3",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/brightlocal/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56237?format=api",
            "purl": "pkg:composer/david-garcia/phpwhois@4.2.3",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/david-garcia/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56219?format=api",
            "purl": "pkg:composer/ivankristianto/phpwhois@4.2.3",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ivankristianto/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56371?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@5.1.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@5.1.0"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56206?format=api",
            "purl": "pkg:composer/brightlocal/phpwhois@4.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/brightlocal/phpwhois@4.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56236?format=api",
            "purl": "pkg:composer/david-garcia/phpwhois@4.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/david-garcia/phpwhois@4.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56218?format=api",
            "purl": "pkg:composer/ivankristianto/phpwhois@4.2.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/ivankristianto/phpwhois@4.2.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224263?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224264?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224265?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224266?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224267?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@5.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@5.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/224268?format=api",
            "purl": "pkg:composer/jsmitty12/phpwhois@5.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/jsmitty12/phpwhois@5.0.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223475?format=api",
            "purl": "pkg:composer/kazist/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/kazist/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223476?format=api",
            "purl": "pkg:composer/kazist/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/kazist/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223477?format=api",
            "purl": "pkg:composer/kazist/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/kazist/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56242?format=api",
            "purl": "pkg:composer/kazist/phpwhois@4.2.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/kazist/phpwhois@4.2.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223478?format=api",
            "purl": "pkg:composer/phpwhois/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                },
                {
                    "vulnerability": "VCID-ykxw-rc3n-g3g4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpwhois/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223479?format=api",
            "purl": "pkg:composer/phpwhois/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                },
                {
                    "vulnerability": "VCID-ykxw-rc3n-g3g4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpwhois/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56243?format=api",
            "purl": "pkg:composer/phpwhois/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                },
                {
                    "vulnerability": "VCID-ykxw-rc3n-g3g4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpwhois/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223468?format=api",
            "purl": "pkg:composer/serluck/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/serluck/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223469?format=api",
            "purl": "pkg:composer/serluck/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/serluck/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223470?format=api",
            "purl": "pkg:composer/serluck/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/serluck/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56217?format=api",
            "purl": "pkg:composer/serluck/phpwhois@4.2.6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/serluck/phpwhois@4.2.6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56232?format=api",
            "purl": "pkg:composer/simple-updates/phpwhois@1.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simple-updates/phpwhois@1.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223422?format=api",
            "purl": "pkg:composer/theonedemon/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/theonedemon/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223423?format=api",
            "purl": "pkg:composer/theonedemon/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/theonedemon/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56199?format=api",
            "purl": "pkg:composer/theonedemon/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/theonedemon/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223471?format=api",
            "purl": "pkg:composer/truckersmp/phpwhois@4.2.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/truckersmp/phpwhois@4.2.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223472?format=api",
            "purl": "pkg:composer/truckersmp/phpwhois@4.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/truckersmp/phpwhois@4.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223473?format=api",
            "purl": "pkg:composer/truckersmp/phpwhois@4.2.5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/truckersmp/phpwhois@4.2.5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/223474?format=api",
            "purl": "pkg:composer/truckersmp/phpwhois@4.3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/truckersmp/phpwhois@4.3.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56235?format=api",
            "purl": "pkg:composer/truckersmp/phpwhois@4.3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-rrkv-3fw9-k7eq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/truckersmp/phpwhois@4.3.1"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-5243",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.11114",
                    "scoring_system": "epss",
                    "scoring_elements": "0.93618",
                    "published_at": "2026-06-06T12:55:00Z"
                },
                {
                    "value": "0.11114",
                    "scoring_system": "epss",
                    "scoring_elements": "0.93608",
                    "published_at": "2026-06-04T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-5243"
        },
        {
            "reference_url": "https://blog.nettitude.com/uk/cve-2015-5243-phpwhois-remote-code-execution",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://blog.nettitude.com/uk/cve-2015-5243-phpwhois-remote-code-execution"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/brightlocal/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/brightlocal/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/david-garcia/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/david-garcia/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/ivankristianto/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/ivankristianto/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/kazist/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/kazist/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpwhois/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpwhois/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/serluck/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/serluck/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/simple-updates/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/simple-updates/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/truckersmp/phpwhois/CVE-2015-5243.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/truckersmp/phpwhois/CVE-2015-5243.yaml"
        },
        {
            "reference_url": "https://github.com/Gemorroj/phpwhois/commit/91c937e03c876ba1290b6de2a3ad953d2105fdd0",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/Gemorroj/phpwhois/commit/91c937e03c876ba1290b6de2a3ad953d2105fdd0"
        },
        {
            "reference_url": "https://github.com/jsmitty12/phpWhois/blob/master/CHANGELOG.md",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/jsmitty12/phpWhois/blob/master/CHANGELOG.md"
        },
        {
            "reference_url": "https://github.com/jsmitty12/phpWhois/issues/19",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/jsmitty12/phpWhois/issues/19"
        },
        {
            "reference_url": "https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180425-01_phpWhois_Code_Execution",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180425-01_phpWhois_Code_Execution"
        },
        {
            "reference_url": "https://github.com/sparc/phpWhois.org/commit/5cc572490c9053d46598ec9348a11e36a5a33a46#diff-f150ae17da7341bf6c2eff928684b3a3",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/sparc/phpWhois.org/commit/5cc572490c9053d46598ec9348a11e36a5a33a46#diff-f150ae17da7341bf6c2eff928684b3a3"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5243",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "9.8",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "CRITICAL",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5243"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 94,
            "name": "Improper Control of Generation of Code ('Code Injection')",
            "description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."
        }
    ],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": "0.5",
    "weighted_severity": "9.0",
    "risk_score": 4.5,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rrkv-3fw9-k7eq"
}