Idevspot

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Idevspot records in CISA KEV

No Idevspot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Isupport 6 records LOW Phphostbot 4 records LOW Phplinkexchange 4 records MEDIUM Nixieaffiliate 2 records LOW Textads 2 records LOW Autohost 1 record LOW Bizdirectory 1 record LOW Idev-businessdirectory 1 record LOW

Records

4 records in Phphostbot · all components

TI-2006-03663 CVE-2006-3776 · GHSA-5xm4-pxv6-f5vr

PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0…

LOW 39

PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0329 Published 2006-07-21 No fix listed CWE-94

TI-2007-04096 CVE-2007-4231 · GHSA-fq8q-p2hj-mx9w

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06…

LOW 36

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a different vector than…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03577 Published 2007-08-08 No fix listed

TI-2007-03962 CVE-2007-4094 · GHSA-3q4q-4m2v-g7gj

PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot…

LOW 36

PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the login_form parameter, a different vector than CVE-2006-3776.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01697 Published 2007-07-30 No fix listed

TI-2011-03336 CVE-2011-3779 · GHSA-8m22-4hf7-jcj5

PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct…

LOW 25

PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain ot…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01229 Published 2011-09-24 No fix listed CWE-200

Open these records in search →

Critical	0
High	7
Medium	14
Low	0
No CVSS	0