Skip to content
Noroxi

maianscriptworld records

21 published records for vendor maianscriptworld.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2021-32172
    59Plan

    Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.

    CriticalCVSS 9.8Proof of conceptEPSS 66%

    maianscriptworld · maian cartOct 7, 2021

  • CVE-2008-7086
    32Monitor

    Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie c

    HighCVSS 7.5Proof of conceptEPSS 7%

    maianscriptworld · maian greetingsAug 26, 2009

  • CVE-2014-10004
    31Monitor

    SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via

    HighCVSS 7.5No exploitEPSS 2%

    maianscriptworld · maian uploaderJan 13, 2015

  • CVE-2008-2208
    30Monitor

    SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords pa

    HighCVSS 7.5No exploitEPSS 1%

    maianscriptworld · maian greetingMay 14, 2008

  • CVE-2008-2205
    30Monitor

    SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album paramete

    HighCVSS 7.5No exploitEPSS 1%

    maianscriptworld · maian musicMay 14, 2008

  • CVE-2008-2203
    30Monitor

    SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords par

    HighCVSS 7.5No exploitEPSS 1%

    maianscriptworld · maian searchMay 14, 2008

  • CVE-2014-10006
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unsp

    MediumCVSS 6.8No exploitEPSS 1%

    maianscriptworld · maian uploaderJan 13, 2015

  • CVE-2014-10005
    21Monitor

    Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, wh

    MediumCVSS 5.0No exploitEPSS 2%

    maianscriptworld · maian uploaderJan 13, 2015

  • CVE-2008-2202
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 4.3Proof of conceptEPSS 2%

    maianscriptworld · maian uploaderMay 14, 2008

  • CVE-2014-10007
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian weblogJan 13, 2015

  • CVE-2008-2209
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian greetingMay 14, 2008

  • CVE-2008-2200
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via th

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian weblogMay 14, 2008

  • CVE-2008-2201
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary w

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian recipeMay 14, 2008

  • CVE-2008-2206
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian musicMay 14, 2008

  • CVE-2008-2207
    17Monitor

    Cross-site scripting (XSS) vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian galleryMay 14, 2008

  • CVE-2008-2210
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian supportMay 14, 2008

  • CVE-2008-2211
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrar

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian guestbookMay 14, 2008

  • CVE-2008-2213
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary we

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian linksMay 14, 2008

  • CVE-2008-2212
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian cartMay 14, 2008

  • CVE-2008-2204
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary w

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian searchMay 14, 2008

  • CVE-2008-1075
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.3No exploitEPSS 1%

    maianscriptworld · maian cartFeb 28, 2008