Maianscriptworld

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Maianscriptworld records in CISA KEV

No Maianscriptworld vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maian Uploader 4 records LOW Maian Cart 3 records HIGH Maian Greeting 2 records LOW Maian Music 2 records LOW Maian Search 2 records LOW Maian Weblog 2 records LOW Maian Gallery 1 record LOW Maian Greetings 1 record MEDIUM

Records

3 records in Maian Cart · all components

TI-2021-12075 CVE-2021-32172 · GHSA-p6pf-mpv2-5j87

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a…

HIGH 78

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66433 Published 2021-10-07 No fix listed CWE-862

TI-2008-02124 CVE-2008-2212 · GHSA-rccf-5pfw-f89w

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminhe…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-05-14 No fix listed CWE-79

TI-2008-01029 CVE-2008-1075 · GHSA-pjwc-7xmf-rc5q

Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-02-29 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	15
Low	0
No CVSS	0