scriptsez kayıtları
scriptsez üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2007-0518Kavram kanıtı | Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allowscriptsez · smart php subscriber | Yüksek7,5 | — | %2,5 | 25 Oca 2007 |
31İzleyin | CVE-2009-4683Kavram kanıtı | Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via direscriptsez · good\/bad vote · CWE-22 | Yüksek7,5 | — | %2,4 | 10 Mar 2010 |
30İzleyin | CVE-2007-0517İstismar yok | Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackescriptsez · random php quote | Yüksek7,5 | — | %1,5 | 25 Oca 2007 |
30İzleyin | CVE-2012-0983Kavram kanıtı | SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a viscriptsez · ez album · CWE-89 | Yüksek7,5 | — | %1,0 | 2 Şub 2012 |
27İzleyin | CVE-2009-4385Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the auscriptsez · ez poll hoster · CWE-352 | Orta6,8 | — | %1,0 | 22 Ara 2009 |
27İzleyin | CVE-2009-4826Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack thscriptsez · mini hosting panel · CWE-352 | Orta6,8 | — | %0,9 | 27 Nis 2010 |
21İzleyin | CVE-2008-6089Kavram kanıtı | Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a ..scriptsez · easy image downloader · CWE-22 | Orta5,0 | — | %3,1 | 6 Şub 2009 |
21İzleyin | CVE-2008-6112Kavram kanıtı | Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a ..scriptsez · ez ringtone manager · CWE-22 | Orta5,0 | — | %3,0 | 11 Şub 2009 |
21İzleyin | CVE-2008-5218Kavram kanıtı | ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cscriptsez · freeze greetings · CWE-264 | Orta5,0 | — | %2,7 | 25 Kas 2008 |
18İzleyin | CVE-2009-3601Kavram kanıtı | Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script scriptsez · ultimate poll · CWE-79 | Orta4,3 | — | %3,0 | 8 Eki 2009 |
18İzleyin | CVE-2008-2116Kavram kanıtı | Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local scriptsez · power editor · CWE-22 | Orta4,4 | — | %2,5 | 8 May 2008 |
18İzleyin | CVE-2008-6090Kavram kanıtı | Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via ascriptsez · mini hosting panel · CWE-22 | Orta4,3 | — | %2,3 | 6 Şub 2009 |
18İzleyin | CVE-2006-3004İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML viascriptsez · ez ringtone manager | Orta4,3 | — | %2,1 | 12 Haz 2006 |
17İzleyin | CVE-2009-2551Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web scriptscriptsez · easy image downloader · CWE-79 | Orta4,3 | — | %1,5 | 20 Tem 2009 |
17İzleyin | CVE-2009-4366Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTMscriptsez · ez blog · CWE-79 | Orta4,3 | — | %1,5 | 21 Ara 2009 |
17İzleyin | CVE-2008-2115Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrascriptsez · power editor · CWE-79 | Orta4,3 | — | %1,5 | 8 May 2008 |
17İzleyin | CVE-2009-4384Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inject arbitrary web scrscriptsez · ez poll hoster · CWE-79 | Orta4,3 | — | %1,5 | 22 Ara 2009 |
17İzleyin | CVE-2009-4364Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML viscriptsez · ez blog · CWE-79 | Orta4,3 | — | %1,5 | 21 Ara 2009 |
17İzleyin | CVE-2009-4682Kavram kanıtı | Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via thescriptsez · good\/bad vote · CWE-79 | Orta4,3 | — | %1,4 | 10 Mar 2010 |
17İzleyin | CVE-2006-2232İstismar yok | Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTMLscriptsez · cute guestbook | Orta4,3 | — | %1,2 | 5 May 2006 |
17İzleyin | CVE-2009-4317İstismar yok | Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML viscriptsez · ez cart · CWE-79 | Orta4,3 | — | %1,1 | 14 Ara 2009 |
17İzleyin | CVE-2009-0762İstismar yok | Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the scriptsez · ez php comment · CWE-79 | Orta4,3 | — | %1,0 | 6 Mar 2009 |
17İzleyin | CVE-2009-4365Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authenscriptsez · ez blog · CWE-352 | Orta4,3 | — | %0,9 | 21 Ara 2009 |
- CVE-2007-051831İzleyin
Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allow
YüksekCVSS 7,5Kavram kanıtıEPSS %2scriptsez · smart php subscriber25 Oca 2007
- CVE-2009-468331İzleyin
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via dire
YüksekCVSS 7,5Kavram kanıtıEPSS %2scriptsez · good\/bad vote10 Mar 2010
- CVE-2007-051730İzleyin
Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attacke
YüksekCVSS 7,5İstismar yokEPSS %1scriptsez · random php quote25 Oca 2007
- CVE-2012-098330İzleyin
SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a vi
YüksekCVSS 7,5Kavram kanıtıEPSS %1scriptsez · ez album2 Şub 2012
- CVE-2009-438527İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the au
OrtaCVSS 6,8Kavram kanıtıEPSS %1scriptsez · ez poll hoster22 Ara 2009
- CVE-2009-482627İzleyin
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack th
OrtaCVSS 6,8Kavram kanıtıEPSS %1scriptsez · mini hosting panel27 Nis 2010
- CVE-2008-608921İzleyin
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %3scriptsez · easy image downloader6 Şub 2009
- CVE-2008-611221İzleyin
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %3scriptsez · ez ringtone manager11 Şub 2009
- CVE-2008-521821İzleyin
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain c
OrtaCVSS 5,0Kavram kanıtıEPSS %3scriptsez · freeze greetings25 Kas 2008
- CVE-2009-360118İzleyin
Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %3scriptsez · ultimate poll8 Eki 2009
- CVE-2008-211618İzleyin
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local
OrtaCVSS 4,4Kavram kanıtıEPSS %3scriptsez · power editor8 May 2008
- CVE-2008-609018İzleyin
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a
OrtaCVSS 4,3Kavram kanıtıEPSS %2scriptsez · mini hosting panel6 Şub 2009
- CVE-2006-300418İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via
OrtaCVSS 4,3İstismar yokEPSS %2scriptsez · ez ringtone manager12 Haz 2006
- CVE-2009-255117İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %2scriptsez · easy image downloader20 Tem 2009
- CVE-2009-436617İzleyin
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTM
OrtaCVSS 4,3Kavram kanıtıEPSS %2scriptsez · ez blog21 Ara 2009
- CVE-2008-211517İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitra
OrtaCVSS 4,3Kavram kanıtıEPSS %1scriptsez · power editor8 May 2008
- CVE-2009-438417İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inject arbitrary web scr
OrtaCVSS 4,3Kavram kanıtıEPSS %1scriptsez · ez poll hoster22 Ara 2009
- CVE-2009-436417İzleyin
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3Kavram kanıtıEPSS %1scriptsez · ez blog21 Ara 2009
- CVE-2009-468217İzleyin
Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3Kavram kanıtıEPSS %1scriptsez · good\/bad vote10 Mar 2010
- CVE-2006-223217İzleyin
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %1scriptsez · cute guestbook5 May 2006
- CVE-2009-431717İzleyin
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3İstismar yokEPSS %1scriptsez · ez cart14 Ara 2009
- CVE-2009-076217İzleyin
Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3İstismar yokEPSS %1scriptsez · ez php comment6 Mar 2009
- CVE-2009-436517İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authen
OrtaCVSS 4,3Kavram kanıtıEPSS %1scriptsez · ez blog21 Ara 2009