Maianscriptworld

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Maianscriptworld records in CISA KEV

No Maianscriptworld vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maian Uploader 4 records LOW Maian Cart 3 records HIGH Maian Greeting 2 records LOW Maian Music 2 records LOW Maian Search 2 records LOW Maian Weblog 2 records LOW Maian Gallery 1 record LOW Maian Greetings 1 record MEDIUM

Records

4 records in Maian Uploader · all components

TI-2014-08166 CVE-2014-10004 · GHSA-v4h8-rwfj-mm33

SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows…

LOW 37

SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02072 Published 2015-01-13 No fix listed CWE-89

TI-2014-08168 CVE-2014-10006 · GHSA-6vrf-5pp8-7pf9

Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00614 Published 2015-01-13 No fix listed CWE-352

TI-2014-08167 CVE-2014-10005 · GHSA-wjh2-79x3-xjv2

Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request…

LOW 27

Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01858 Published 2015-01-13 No fix listed CWE-200

TI-2008-02114 CVE-2008-2202 · GHSA-grgf-gwg9-2jvj

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01538 Published 2008-05-14 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	15
Low	0
No CVSS	0