İçeriğe atla
Noroxi

Iscripts kayıtları

iscripts üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2018-11372
    39İzleyin

    iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    iscripts · eswap22 May 2018

  • CVE-2018-11373
    39İzleyin

    iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    iscripts · eswap22 May 2018

  • CVE-2018-11470
    35İzleyin

    iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.

    YüksekCVSS 8,8İstismar yokEPSS %1

    iscripts · eswap25 May 2018

  • CVE-2018-10137
    35İzleyin

    iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iscripts · uberforx16 Nis 2018

  • CVE-2018-10048
    35İzleyin

    iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iscripts · eswap11 Nis 2018

  • CVE-2010-4980
    31İzleyin

    SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    iscripts · reservelogic1 Kas 2011

  • CVE-2013-7189
    30İzleyin

    Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via th

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · autohoster20 Ara 2013

  • CVE-2010-2853
    30İzleyin

    SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · visualcaster24 Tem 2010

  • CVE-2010-4983
    30İzleyin

    SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id p

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · cybermatch1 Kas 2011

  • CVE-2010-5036
    30İzleyin

    SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type para

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · eswap2 Kas 2011

  • CVE-2010-5034
    30İzleyin

    SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · easybiller2 Kas 2011

  • CVE-2010-2624
    30İzleyin

    Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) commen

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · easysnaps2 Tem 2010

  • CVE-2008-1859
    30İzleyin

    SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parame

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · socialware16 Nis 2008

  • CVE-2008-4169
    30İzleyin

    SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    iscripts · easyindex22 Eyl 2008

  • CVE-2018-10050
    28İzleyin

    iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.

    YüksekCVSS 7,2İstismar yokEPSS %1

    iscripts · eswap11 Nis 2018

  • CVE-2007-5261
    26İzleyin

    Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter

    OrtaCVSS 6,4Kavram kanıtıEPSS %2

    iscripts · multicart6 Eki 2007

  • CVE-2008-1790
    26İzleyin

    Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a cra

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    iscripts · socialware15 Nis 2008

  • CVE-2008-0911
    26İzleyin

    SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL comma

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    iscripts · multicart22 Şub 2008

  • CVE-2018-9235
    25İzleyin

    iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    iscripts · sonicbb4 Nis 2018

  • CVE-2018-10135
    24İzleyin

    iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.

    OrtaCVSS 6,1İstismar yokEPSS %1

    iscripts · eswap16 Nis 2018

  • CVE-2018-10136
    24İzleyin

    iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settin

    OrtaCVSS 6,1İstismar yokEPSS %1

    iscripts · uberforx16 Nis 2018

  • CVE-2018-9237
    22İzleyin

    iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    iscripts · easycreate4 Nis 2018

  • CVE-2018-9236
    22İzleyin

    iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    iscripts · easycreate4 Nis 2018

  • CVE-2013-7190
    21İzleyin

    Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1

    OrtaCVSS 5,0Kavram kanıtıEPSS %4

    iscripts · autohoster20 Ara 2013

  • CVE-2008-1772
    21İzleyin

    iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.

    OrtaCVSS 5,0Kavram kanıtıEPSS %2

    iscripts · socialware14 Nis 2008