Vendors / Entertainmentscript Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Entertainmentscript records in CISA KEV No Entertainmentscript vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00967 · Published 2008-05-21 · No fix listed CWE-89
Priority LOW 34
Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01929 · Published 2008-05-27 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0