Alexscriptengine

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Alexscriptengine records in CISA KEV

No Alexscriptengine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Download-engine 2 records LOW Picture-engine 1 record LOW

Records

3 records

TI-2007-02207 CVE-2007-2289 · GHSA-h2gj-j3wh-6965

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in…

LOW 36

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01348 Published 2007-04-26 No fix listed

TI-2007-02173 CVE-2007-2255 · GHSA-5mhv-62mq-c5pf

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote…

LOW 36

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir parameter to addmember.php, (2) lang_path parameter to admin/e…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01744 Published 2007-04-25 No fix listed

TI-2007-01715 CVE-2007-1791 · GHSA-vp43-58mq-7r78

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote…

LOW 35

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01061 Published 2007-03-31 No fix listed

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0