Phpscriptsmall records

8 published records for vendor phpscriptsmall.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-25676No exploit	Ask Expert Script 3.0.5 Cross Site Scripting SQL Injectionphpscriptsmall · ask expert script · CWE-79 pre-auth RCE SQL injection XSS	High8.8	—	0.5%	Apr 5, 2026
35Monitor	CVE-2019-25668No exploit	News Website Script 2.0.5 SQL Injection via index.phpphpscriptsmall · news website script · CWE-89 Pre-auth SQL injection	High8.8	—	0.4%	Apr 5, 2026
35Monitor	CVE-2019-25680No exploit	Advance Gift Shop Pro Script 2.0.3 SQL Injection via searchphpscriptsmall · advance gift shop pro script · CWE-89 pre-auth RCE SQL injection	High8.8	—	0.4%	Apr 5, 2026
35Monitor	CVE-2019-25444No exploit	Fiverr Clone Script 1.2.2 SQL Injection via page Parameterphpscriptsmall · fiverr clone script · CWE-89 Pre-auth SQL injection	High8.8	—	0.4%	Feb 20, 2026
32Monitor	CVE-2019-9062No exploit	PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.phpscriptsmall · online food ordering script · CWE-352 CSRF	High8.0	—	0.5%	Feb 23, 2019
24Monitor	CVE-2018-16456No exploit	PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword.phpscriptsmall · website seller script · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Oct 4, 2018
24Monitor	CVE-2018-16326No exploit	PHP Scripts Mall Olx Clone 3.4.2 has XSS.phpscriptsmall · olx clone · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Oct 4, 2018
20Monitor	CVE-2019-25445No exploit	Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.phpphpscriptsmall · fiverr clone script · CWE-79 pre-auth RCE XSS	Medium5.1	—	0.2%	Feb 20, 2026

CVE-2019-25676
35Monitor
Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection
HighCVSS 8.8No exploitEPSS 0%
phpscriptsmall · ask expert scriptApr 5, 2026
CVE-2019-25668
35Monitor
News Website Script 2.0.5 SQL Injection via index.php
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
phpscriptsmall · news website scriptApr 5, 2026
CVE-2019-25680
35Monitor
Advance Gift Shop Pro Script 2.0.3 SQL Injection via search
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
phpscriptsmall · advance gift shop pro scriptApr 5, 2026
CVE-2019-25444
35Monitor
Fiverr Clone Script 1.2.2 SQL Injection via page Parameter
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
phpscriptsmall · fiverr clone scriptFeb 20, 2026
CVE-2019-9062
32Monitor
PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.
HighCVSS 8.0No exploitEPSS 1%
- CSRF
phpscriptsmall · online food ordering scriptFeb 23, 2019
CVE-2018-16456
24Monitor
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
phpscriptsmall · website seller scriptOct 4, 2018
CVE-2018-16326
24Monitor
PHP Scripts Mall Olx Clone 3.4.2 has XSS.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
phpscriptsmall · olx cloneOct 4, 2018
CVE-2019-25445
20Monitor
Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php
MediumCVSS 5.1No exploitEPSS 0%
- pre-auth RCE
- XSS
phpscriptsmall · fiverr clone scriptFeb 20, 2026