Image Sharing Script Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Image Sharing Script Project records in CISA KEV

No Image Sharing Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Image Sharing Script · all components

TI-2019-05291 CVE-2019-7431 · GHSA-3vqq-mcf6-8w3j

LOW 32

PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05290 CVE-2019-7430 · GHSA-4gqx-rf75-h3xh

LOW 26

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01043 Published 2019-03-20 No fix listed CWE-79

TI-2018-05038 CVE-2018-6902 · GHSA-h3fm-9x6m-vjmr

LOW 25

PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-12 No fix listed CWE-79