Skip to content
Noroxi

powerscripts records

8 published records for vendor powerscripts.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2000-0074
      33Monitor

      PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.

      HighCVSS 7.5Proof of conceptEPSS 10%

      powerscripts · plusmailJan 11, 2000

    • CVE-2008-1534
      31Monitor

      Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via

      HighCVSS 7.5Proof of conceptEPSS 3%

      powerscripts · powerphpboardMar 28, 2008

    • CVE-2008-0742
      31Monitor

      Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via

      HighCVSS 7.5Proof of conceptEPSS 2%

      powerscripts · powernewsFeb 12, 2008

    • CVE-2009-0707
      31Monitor

      SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginema

      HighCVSS 7.5Proof of conceptEPSS 2%

      powerscripts · powerclanFeb 23, 2009

    • CVE-2006-1805
      30Monitor

      SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid param

      HighCVSS 7.5Proof of conceptEPSS 1%

      powerscripts · powerclanApr 18, 2006

    • CVE-2008-1537
      28Monitor

      Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and exec

      MediumCVSS 6.8Proof of conceptEPSS 3%

      powerscripts · powerbookMar 28, 2008

    • CVE-2009-0705
      27Monitor

      SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execu

      MediumCVSS 6.8Proof of conceptEPSS 1%

      powerscripts · powernewsFeb 23, 2009

    • CVE-2006-6715
      21Monitor

      PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote at

      MediumCVSS 5.1Proof of conceptEPSS 3%

      powerscripts · powerclanDec 22, 2006