ScriptAndTools records
12 published records for vendor scriptandtools.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-266 Incorrect Privilege Assignment4
- CWE-307 Improper Restriction of Excessive Authentication Attempts2
- CWE-285 Improper Authorization1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-698 Execution After Redirect (EAR)1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2025-3975No exploit | ScriptAndTools eCommerce-website-in-PHP subscriber-csv.php information disclosurescriptandtools · ecommerce-website-in-php · CWE-200 | Medium6.9 | — | 0.8% | Apr 27, 2025 |
27Monitor | CVE-2025-5128No exploit | ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injectionscriptandtools · real estate management system · CWE-74 | Medium6.9 | — | 0.6% | May 24, 2025 |
27Monitor | CVE-2025-4066No exploit | ScriptAndTools Online-Travling-System addpackage.php access controlscriptandtools · online traveling system · CWE-266 | Medium6.9 | — | 0.6% | Apr 29, 2025 |
27Monitor | CVE-2025-4067No exploit | ScriptAndTools Online-Travling-System viewpackage.php access controlscriptandtools · online traveling system · CWE-266 | Medium6.9 | — | 0.6% | Apr 29, 2025 |
27Monitor | CVE-2025-4064No exploit | ScriptAndTools Online-Travling-System viewenquiry.php access controlscriptandtools · online traveling system · CWE-266 | Medium6.9 | — | 0.6% | Apr 29, 2025 |
27Monitor | CVE-2025-4065No exploit | ScriptAndTools Online-Travling-System addadvertisement.php access controlscriptandtools · online traveling system · CWE-266 | Medium6.9 | — | 0.5% | Apr 29, 2025 |
25Monitor | CVE-2025-3555No exploit | ScriptAndTools eCommerce-website-in-PHP login.php excessive authenticationscriptandtools · ecommerce-website-in-php · CWE-307 | Medium6.3 | — | 1.0% | Apr 14, 2025 |
25Monitor | CVE-2025-3556No exploit | ScriptAndTools eCommerce-website-in-PHP login.php excessive authenticationscriptandtools · ecommerce-website-in-php · CWE-307 | Medium6.3 | — | 1.0% | Apr 14, 2025 |
22Monitor | CVE-2025-9848No exploit | ScriptAndTools Real Estate Management System userlist.php redirectscriptandtools · real estate management system · CWE-698 | Medium5.5 | — | 0.6% | Sep 2, 2025 |
21Monitor | CVE-2025-3557No exploit | ScriptAndTools eCommerce-website-in-PHP cross-site request forgeryscriptandtools · ecommerce-website-in-php · CWE-352 | Medium5.3 | — | 0.3% | Apr 14, 2025 |
8Monitor | CVE-2025-6329No exploit | ScriptAndTools Real Estate Management System User Delete userdelete.php authorizationscriptandtools · real estate management system · CWE-285 | Low2.1 | — | 0.5% | Jun 20, 2025 |
8Monitor | CVE-2025-9847No exploit | ScriptAndTools Real Estate Management System register.php unrestricted uploadscriptandtools · real estate management system · CWE-284 | Low2.1 | — | 0.4% | Sep 2, 2025 |
- CVE-2025-397527Monitor
ScriptAndTools eCommerce-website-in-PHP subscriber-csv.php information disclosure
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · ecommerce-website-in-phpApr 27, 2025
- CVE-2025-512827Monitor
ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · real estate management systemMay 24, 2025
- CVE-2025-406627Monitor
ScriptAndTools Online-Travling-System addpackage.php access control
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · online traveling systemApr 29, 2025
- CVE-2025-406727Monitor
ScriptAndTools Online-Travling-System viewpackage.php access control
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · online traveling systemApr 29, 2025
- CVE-2025-406427Monitor
ScriptAndTools Online-Travling-System viewenquiry.php access control
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · online traveling systemApr 29, 2025
- CVE-2025-406527Monitor
ScriptAndTools Online-Travling-System addadvertisement.php access control
MediumCVSS 6.9No exploitEPSS 1%scriptandtools · online traveling systemApr 29, 2025
- CVE-2025-355525Monitor
ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication
MediumCVSS 6.3No exploitEPSS 1%scriptandtools · ecommerce-website-in-phpApr 14, 2025
- CVE-2025-355625Monitor
ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication
MediumCVSS 6.3No exploitEPSS 1%scriptandtools · ecommerce-website-in-phpApr 14, 2025
- CVE-2025-984822Monitor
ScriptAndTools Real Estate Management System userlist.php redirect
MediumCVSS 5.5No exploitEPSS 1%scriptandtools · real estate management systemSep 2, 2025
- CVE-2025-355721Monitor
ScriptAndTools eCommerce-website-in-PHP cross-site request forgery
MediumCVSS 5.3No exploitEPSS 0%scriptandtools · ecommerce-website-in-phpApr 14, 2025
- CVE-2025-63298Monitor
ScriptAndTools Real Estate Management System User Delete userdelete.php authorization
LowCVSS 2.1No exploitEPSS 1%scriptandtools · real estate management systemJun 20, 2025
- CVE-2025-98478Monitor
ScriptAndTools Real Estate Management System register.php unrestricted upload
LowCVSS 2.1No exploitEPSS 0%scriptandtools · real estate management systemSep 2, 2025