Hotwebscripts

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Hotwebscripts records in CISA KEV

No Hotwebscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cms Mundo 4 records LOW Hotweb Rentals 3 records LOW Weblog Oggi 1 record LOW

Records

8 records

TI-2006-03035 CVE-2006-3135 · GHSA-6936-vrv4-5pqc

Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other…

LOW 37

Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01894 Published 2006-07-13 No fix listed

TI-2006-02818 CVE-2006-2911 · GHSA-m9hf-xqmh-p63v

SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008…

LOW 36

SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01413 Published 2006-06-21 No fix listed

TI-2010-04460 CVE-2010-4737 · GHSA-9865-q9qp-967m

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote…

LOW 35

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01021 Published 2011-02-16 No fix listed CWE-89

TI-2010-04426 CVE-2010-4703 · GHSA-j3gx-3957-cc35

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote…

LOW 35

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01147 Published 2011-01-20 No fix listed CWE-89

TI-2009-03185 CVE-2009-3343 · GHSA-9xh5-5qwr-3g4w

SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to…

LOW 35

SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2009-09-24 No fix listed CWE-89

TI-2006-02592 CVE-2006-2684 · GHSA-v47w-6gw9-hr53

Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows…

LOW 29

Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01299 Published 2006-05-31 No fix listed

TI-2006-02838 CVE-2006-2931 · GHSA-5789-w37q-mfc3

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which…

LOW 26

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01506 Published 2006-06-21 No fix listed

TI-2006-02728 CVE-2006-2820 · GHSA-cgv2-3mf8-8qf4

Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an I…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-06-05 No fix listed

Open these records in search →

Critical	0
High	5
Medium	3
Low	0
No CVSS	0