Powerscripts

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Powerscripts records in CISA KEV

No Powerscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Powerclan 3 records LOW Powernews 2 records LOW Plusmail 1 record MEDIUM Powerbook 1 record LOW Powerphpboard 1 record LOW

Records

8 records

TI-2000-00074 CVE-2000-0074 · GHSA-3p8m-qpqj-m94w

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a…

MEDIUM 45

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0978 Published 2000-02-04 No fix listed

TI-2008-01468 CVE-2008-1534 · GHSA-chpr-g3x2-5jgv

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote…

LOW 38

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02996 Published 2008-03-28 No fix listed CWE-22

TI-2009-00674 CVE-2009-0707 · GHSA-4m9h-7gmv-8qc2

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers…

LOW 37

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02047 Published 2009-02-23 No fix listed CWE-89

TI-2008-00708 CVE-2008-0742 · GHSA-rwf6-mxf8-5hcf

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02286 Published 2008-02-13 No fix listed CWE-22

TI-2006-01751 CVE-2006-1805 · GHSA-8573-8x6q-rfxx

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to…

LOW 36

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01397 Published 2006-04-18 No fix listed

TI-2008-01471 CVE-2008-1537 · GHSA-pvw5-f3qv-rx86

Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts…

LOW 35

Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02877 Published 2008-03-28 No fix listed CWE-22

TI-2009-00672 CVE-2009-0705 · GHSA-8cmf-vm53-gmwg

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when…

LOW 32

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00962 Published 2009-02-23 No fix listed CWE-89

TI-2006-06459 CVE-2006-6715 · GHSA-j2xm-43r5-3fgc

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier…

LOW 29

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings[footer] paramete…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02997 Published 2006-12-23 No fix listed

Open these records in search →

Critical	0
High	5
Medium	3
Low	0
No CVSS	0