Idevspot

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Idevspot records in CISA KEV

No Idevspot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Isupport 6 records LOW Phphostbot 4 records LOW Phplinkexchange 4 records MEDIUM Nixieaffiliate 2 records LOW Textads 2 records LOW Autohost 1 record LOW Bizdirectory 1 record LOW Idev-businessdirectory 1 record LOW

Records

2 records in Nixieaffiliate · all components

TI-2006-04722 CVE-2006-4895 · GHSA-p3c8-wx4r-4g79

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary…

LOW 38

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02602 Published 2006-09-19 No fix listed

TI-2006-04721 CVE-2006-4894 · GHSA-2r92-27x4-mx6c

Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot…

LOW 27

Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04098 Published 2006-09-19 No fix listed

Open these records in search →

Critical	0
High	7
Medium	14
Low	0
No CVSS	0