Skip to content
Noroxi

Iscripts records

29 published records for vendor iscripts.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
10
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2018-11372
    39Monitor

    iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    iscripts · eswapMay 22, 2018

  • CVE-2018-11373
    39Monitor

    iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    iscripts · eswapMay 22, 2018

  • CVE-2018-11470
    35Monitor

    iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.

    HighCVSS 8.8No exploitEPSS 1%

    iscripts · eswapMay 25, 2018

  • CVE-2018-10137
    35Monitor

    iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.

    HighCVSS 8.8No exploitEPSS 0%

    iscripts · uberforxApr 16, 2018

  • CVE-2018-10048
    35Monitor

    iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.

    HighCVSS 8.8No exploitEPSS 0%

    iscripts · eswapApr 11, 2018

  • CVE-2010-4980
    31Monitor

    SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via

    HighCVSS 7.5Proof of conceptEPSS 2%

    iscripts · reservelogicNov 1, 2011

  • CVE-2013-7189
    30Monitor

    Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via th

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · autohosterDec 20, 2013

  • CVE-2010-2853
    30Monitor

    SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · visualcasterJul 24, 2010

  • CVE-2010-4983
    30Monitor

    SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id p

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · cybermatchNov 1, 2011

  • CVE-2010-5036
    30Monitor

    SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type para

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · eswapNov 2, 2011

  • CVE-2010-5034
    30Monitor

    SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands vi

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · easybillerNov 2, 2011

  • CVE-2010-2624
    30Monitor

    Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) commen

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · easysnapsJul 2, 2010

  • CVE-2008-1859
    30Monitor

    SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parame

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · socialwareApr 16, 2008

  • CVE-2008-4169
    30Monitor

    SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 1%

    iscripts · easyindexSep 22, 2008

  • CVE-2018-10050
    28Monitor

    iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.

    HighCVSS 7.2No exploitEPSS 1%

    iscripts · eswapApr 11, 2018

  • CVE-2007-5261
    26Monitor

    Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter

    MediumCVSS 6.4Proof of conceptEPSS 2%

    iscripts · multicartOct 6, 2007

  • CVE-2008-1790
    26Monitor

    Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a cra

    MediumCVSS 6.5Proof of conceptEPSS 1%

    iscripts · socialwareApr 15, 2008

  • CVE-2008-0911
    26Monitor

    SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL comma

    MediumCVSS 6.5Proof of conceptEPSS 1%

    iscripts · multicartFeb 22, 2008

  • CVE-2018-9235
    25Monitor

    iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    iscripts · sonicbbApr 4, 2018

  • CVE-2018-10135
    24Monitor

    iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.

    MediumCVSS 6.1No exploitEPSS 1%

    iscripts · eswapApr 16, 2018

  • CVE-2018-10136
    24Monitor

    iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settin

    MediumCVSS 6.1No exploitEPSS 1%

    iscripts · uberforxApr 16, 2018

  • CVE-2018-9237
    22Monitor

    iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.

    MediumCVSS 5.4Proof of conceptEPSS 2%

    iscripts · easycreateApr 4, 2018

  • CVE-2018-9236
    22Monitor

    iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.

    MediumCVSS 5.4Proof of conceptEPSS 2%

    iscripts · easycreateApr 4, 2018

  • CVE-2013-7190
    21Monitor

    Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1

    MediumCVSS 5.0Proof of conceptEPSS 4%

    iscripts · autohosterDec 20, 2013

  • CVE-2008-1772
    21Monitor

    iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.

    MediumCVSS 5.0Proof of conceptEPSS 2%

    iscripts · socialwareApr 14, 2008