Skip to content
Noroxi

yabsoft records

7 published records for vendor yabsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2009-0966
      31Monitor

      PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code

      HighCVSS 7.5Proof of conceptEPSS 2%

      yabsoft · mega file hosting scriptMar 19, 2009

    • CVE-2012-6039
      30Monitor

      SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to ex

      HighCVSS 7.5Proof of conceptEPSS 1%

      yabsoft · advanced image hosting scriptNov 26, 2012

    • CVE-2009-1032
      30Monitor

      SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitr

      HighCVSS 7.5Proof of conceptEPSS 1%

      yabsoft · advanced image hosting scriptMar 20, 2009

    • CVE-2008-2536
      30Monitor

      SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arb

      HighCVSS 7.5Proof of conceptEPSS 0%

      yabsoft · advanced image hosting scriptJun 3, 2008

    • CVE-2008-2521
      26Monitor

      SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to ex

      MediumCVSS 6.5Proof of conceptEPSS 0%

      yabsoft · mega file hosting scriptJun 3, 2008

    • CVE-2009-4266
      17Monitor

      Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote a

      MediumCVSS 4.3Proof of conceptEPSS 1%

      yabsoft · advanced image hosting scriptDec 10, 2009

    • CVE-2009-3647
      17Monitor

      Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote attackers

      MediumCVSS 4.3Proof of conceptEPSS 1%

      yabsoft · mega file hosting scriptOct 9, 2009