Skip to content
Noroxi

idevspot records

21 published records for vendor idevspot.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    21 records
    • CVE-2006-4741
      31Monitor

      PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary co

      HighCVSS 7.5Proof of conceptEPSS 4%

      idevspot · phplinkexchangeSep 13, 2006

    • CVE-2006-3776
      31Monitor

      PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to ex

      HighCVSS 7.5Proof of conceptEPSS 3%

      idevspot · autohostJul 24, 2006

    • CVE-2006-3777
      31Monitor

      PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code v

      HighCVSS 7.5Proof of conceptEPSS 3%

      idevspot · phplinkexchangeJul 24, 2006

    • CVE-2006-4895
      31Monitor

      IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.

      HighCVSS 7.5No exploitEPSS 2%

      idevspot · nixieaffiliateSep 19, 2006

    • CVE-2010-2319
      31Monitor

      SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page par

      HighCVSS 7.5Proof of conceptEPSS 2%

      idevspot · textadsJun 17, 2010

    • CVE-2007-4094
      31Monitor

      PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP cod

      HighCVSS 7.5No exploitEPSS 1%

      idevspot · phphostbotJul 30, 2007

    • CVE-2005-4616
      30Monitor

      SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file par

      HighCVSS 7.5No exploitEPSS 1%

      idevspot · isupportDec 31, 2005

    • CVE-2007-4231
      28Monitor

      PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitr

      MediumCVSS 6.8Proof of conceptEPSS 3%

      idevspot · phphostbotAug 8, 2007

    • CVE-2007-6539
      28Monitor

      PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_

      MediumCVSS 6.8Proof of conceptEPSS 2%

      idevspot · isupportDec 27, 2007

    • CVE-2012-5326
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authent

      MediumCVSS 6.8Proof of conceptEPSS 0%

      idevspot · isupportOct 8, 2012

    • CVE-2009-4434
      21Monitor

      Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 2%

      idevspot · isupportDec 28, 2009

    • CVE-2011-3779
      20Monitor

      PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p

      MediumCVSS 5.0No exploitEPSS 1%

      idevspot · phphostbotSep 23, 2011

    • CVE-2006-4894
      18Monitor

      Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inj

      MediumCVSS 4.3Proof of conceptEPSS 4%

      idevspot · nixieaffiliateSep 19, 2006

    • CVE-2006-4884
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3Proof of conceptEPSS 3%

      idevspot · isupportSep 19, 2006

    • CVE-2009-4433
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web scri

      MediumCVSS 4.3Proof of conceptEPSS 2%

      idevspot · isupportDec 28, 2009

    • CVE-2006-4883
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3No exploitEPSS 2%

      idevspot · bizdirectorySep 19, 2006

    • CVE-2006-4747
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1

      MediumCVSS 4.3Proof of conceptEPSS 1%

      idevspot · textadsSep 13, 2006

    • CVE-2006-4742
      18Monitor

      Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web scr

      MediumCVSS 4.3Proof of conceptEPSS 1%

      idevspot · phplinkexchangeSep 13, 2006

    • CVE-2008-3679
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary

      MediumCVSS 4.3Proof of conceptEPSS 1%

      idevspot · phplinkexchangeAug 14, 2008

    • CVE-2009-4425
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via th

      MediumCVSS 4.3No exploitEPSS 1%

      idevspot · idevcartDec 28, 2009

    • CVE-2012-1779
      17Monitor

      Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HT

      MediumCVSS 4.3No exploitEPSS 1%

      idevspot · idev-businessdirectoryMar 19, 2012