phpscriptsnow records

10 published records for vendor phpscriptsnow.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2009-2886No exploit	SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the phpscriptsnow · president bios · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.2%	Aug 20, 2009
30Monitor	CVE-2009-2885Proof of concept	SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL commanphpscriptsnow · world\'s tallest buildings · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.0%	Aug 20, 2009
30Monitor	CVE-2009-2891Proof of concept	SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid pphpscriptsnow · riddles · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.0%	Aug 20, 2009
30Monitor	CVE-2009-2888Proof of concept	SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n paraphpscriptsnow · hangman · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.0%	Aug 20, 2009
18Monitor	CVE-2009-2890Proof of concept	Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script orphpscriptsnow · riddles · CWE-79 Pre-auth XSS	Medium4.3	—	3.1%	Aug 20, 2009
17Monitor	CVE-2009-2884Proof of concept	Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrarphpscriptsnow · world\'s tallest buildings · CWE-79 Pre-auth XSS	Medium4.3	—	1.5%	Aug 20, 2009
17Monitor	CVE-2009-2889Proof of concept	Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or Hphpscriptsnow · hangman · CWE-79 Pre-auth XSS	Medium4.3	—	1.5%	Aug 20, 2009
17Monitor	CVE-2009-4685Proof of concept	Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web scrphpscriptsnow · astrology · CWE-79 Pre-auth XSS	Medium4.3	—	1.5%	Mar 10, 2010
17Monitor	CVE-2009-4715No exploit	Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script phpscriptsnow · real time currency exchange · CWE-79 Pre-auth XSS	Medium4.3	—	1.1%	Mar 15, 2010
17Monitor	CVE-2009-2887No exploit	Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web scripphpscriptsnow · president bios · CWE-79 Pre-auth XSS	Medium4.3	—	1.1%	Aug 20, 2009

CVE-2009-2886
30Monitor
SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
phpscriptsnow · president biosAug 20, 2009
CVE-2009-2885
30Monitor
SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL comman
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
phpscriptsnow · world\'s tallest buildingsAug 20, 2009
CVE-2009-2891
30Monitor
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid p
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
phpscriptsnow · riddlesAug 20, 2009
CVE-2009-2888
30Monitor
SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n para
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
phpscriptsnow · hangmanAug 20, 2009
CVE-2009-2890
18Monitor
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or
MediumCVSS 4.3Proof of conceptEPSS 3%
- Pre-auth
- XSS
phpscriptsnow · riddlesAug 20, 2009
CVE-2009-2884
17Monitor
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrar
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
phpscriptsnow · world\'s tallest buildingsAug 20, 2009
CVE-2009-2889
17Monitor
Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or H
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
phpscriptsnow · hangmanAug 20, 2009
CVE-2009-4685
17Monitor
Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web scr
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
phpscriptsnow · astrologyMar 10, 2010
CVE-2009-4715
17Monitor
Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
phpscriptsnow · real time currency exchangeMar 15, 2010
CVE-2009-2887
17Monitor
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web scrip
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
phpscriptsnow · president biosAug 20, 2009