Skip to content
Noroxi

scriptsez records

23 published records for vendor scriptsez.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    23 records
    • CVE-2007-0518
      31Monitor

      Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allow

      HighCVSS 7.5Proof of conceptEPSS 2%

      scriptsez · smart php subscriberJan 25, 2007

    • CVE-2009-4683
      31Monitor

      Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via dire

      HighCVSS 7.5Proof of conceptEPSS 2%

      scriptsez · good\/bad voteMar 10, 2010

    • CVE-2007-0517
      30Monitor

      Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attacke

      HighCVSS 7.5No exploitEPSS 1%

      scriptsez · random php quoteJan 25, 2007

    • CVE-2012-0983
      30Monitor

      SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a vi

      HighCVSS 7.5Proof of conceptEPSS 1%

      scriptsez · ez albumFeb 2, 2012

    • CVE-2009-4385
      27Monitor

      Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the au

      MediumCVSS 6.8Proof of conceptEPSS 1%

      scriptsez · ez poll hosterDec 22, 2009

    • CVE-2009-4826
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack th

      MediumCVSS 6.8Proof of conceptEPSS 1%

      scriptsez · mini hosting panelApr 27, 2010

    • CVE-2008-6089
      21Monitor

      Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 3%

      scriptsez · easy image downloaderFeb 6, 2009

    • CVE-2008-6112
      21Monitor

      Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 3%

      scriptsez · ez ringtone managerFeb 11, 2009

    • CVE-2008-5218
      21Monitor

      ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain c

      MediumCVSS 5.0Proof of conceptEPSS 3%

      scriptsez · freeze greetingsNov 25, 2008

    • CVE-2009-3601
      18Monitor

      Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script

      MediumCVSS 4.3Proof of conceptEPSS 3%

      scriptsez · ultimate pollOct 8, 2009

    • CVE-2008-2116
      18Monitor

      Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local

      MediumCVSS 4.4Proof of conceptEPSS 3%

      scriptsez · power editorMay 8, 2008

    • CVE-2008-6090
      18Monitor

      Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a

      MediumCVSS 4.3Proof of conceptEPSS 2%

      scriptsez · mini hosting panelFeb 6, 2009

    • CVE-2006-3004
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 2%

      scriptsez · ez ringtone managerJun 12, 2006

    • CVE-2009-2551
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script

      MediumCVSS 4.3Proof of conceptEPSS 2%

      scriptsez · easy image downloaderJul 20, 2009

    • CVE-2009-4366
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3Proof of conceptEPSS 2%

      scriptsez · ez blogDec 21, 2009

    • CVE-2008-2115
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitra

      MediumCVSS 4.3Proof of conceptEPSS 1%

      scriptsez · power editorMay 8, 2008

    • CVE-2009-4384
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inject arbitrary web scr

      MediumCVSS 4.3Proof of conceptEPSS 1%

      scriptsez · ez poll hosterDec 22, 2009

    • CVE-2009-4364
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML vi

      MediumCVSS 4.3Proof of conceptEPSS 1%

      scriptsez · ez blogDec 21, 2009

    • CVE-2009-4682
      17Monitor

      Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the

      MediumCVSS 4.3Proof of conceptEPSS 1%

      scriptsez · good\/bad voteMar 10, 2010

    • CVE-2006-2232
      17Monitor

      Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML

      MediumCVSS 4.3No exploitEPSS 1%

      scriptsez · cute guestbookMay 5, 2006

    • CVE-2009-4317
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML vi

      MediumCVSS 4.3No exploitEPSS 1%

      scriptsez · ez cartDec 14, 2009

    • CVE-2009-0762
      17Monitor

      Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the

      MediumCVSS 4.3No exploitEPSS 1%

      scriptsez · ez php commentMar 6, 2009

    • CVE-2009-4365
      17Monitor

      Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authen

      MediumCVSS 4.3Proof of conceptEPSS 1%

      scriptsez · ez blogDec 21, 2009