Fortunescripts

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Fortunescripts records in CISA KEV

No Fortunescripts vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2017-12844 CVE-2017-17573 · GHSA-72q2-q8vp-q2h8

MEDIUM 48

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

TI-2017-13132 CVE-2017-17903 · GHSA-7vjf-6mpf-qv3p

LOW 38

FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00456 Published 2017-12-25 No fix listed CWE-352

TI-2017-13133 CVE-2017-17904 · GHSA-r86v-9f8q-7hgr

LOW 25

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2017-12-25 No fix listed CWE-79