Scriptphp

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Scriptphp records in CISA KEV

No Scriptphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Annoncescripthp 3 records MEDIUM Pronews 3 records LOW Messageriescripthp 2 records LOW Picengine 1 record LOW

Records

3 records in Pronews · all components

TI-2006-06264 CVE-2006-6519 · GHSA-m373-j4rh-vrjp

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01073 Published 2006-12-14 No fix listed

TI-2006-06263 CVE-2006-6518 · GHSA-pg23-vmcr-c2rg

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) date, (4) sujet, (5) message, (6) site, and (7) lien par…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01881 Published 2006-12-14 No fix listed

TI-2006-06324 CVE-2006-6580 · GHSA-mjh6-v3q6-4w2g

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news…

LOW 31

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01174 Published 2006-12-15 No fix listed

Open these records in search →

Critical	0
High	3
Medium	6
Low	0
No CVSS	0