Editeurscripts

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Editeurscripts records in CISA KEV

No Editeurscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Esfaq 2 records LOW Esbaseadmin 1 record LOW Escontacts 1 record LOW Esnews 1 record LOW Espartenaires 1 record LOW

Records

6 records

TI-2008-05712 CVE-2008-6016 · GHSA-36mq-h5r6-m2x4

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2009-01-30 No fix listed CWE-89

TI-2008-05711 CVE-2008-6015 · GHSA-94f2-wq7j-xw67

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) keywords and (2) cat parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2009-01-30 No fix listed CWE-89

TI-2009-02466 CVE-2009-2581 · GHSA-mgm3-5x33-7mw3

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2…

LOW 22

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00893 Published 2009-07-23 No fix listed CWE-79

TI-2008-06564 CVE-2008-6876 · GHSA-m66f-8ffw-m34x

Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2009-07-24 No fix listed CWE-79

TI-2008-06556 CVE-2008-6868 · GHSA-g3v5-x7p8-gp6p

Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts…

LOW 22

Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2009-07-23 No fix listed CWE-79

TI-2008-01958 CVE-2008-2037 · GHSA-5345-r64x-6gw6

Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to inject arbitrary web script or HTML via the msg parameter to (1) login.php, (2) importer.php, (3) a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0145 Published 2008-04-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	1
No CVSS	0