Vendors / Scubez Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Scubez records in CISA KEV No Scubez vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.088 · Published 2017-12-11 · No fix listed CWE-89
Priority LOW 36
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct re…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01384 · Published 2017-12-13 · No fix listed CWE-732
Priority LOW 35
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01145 · Published 2017-12-13 · No fix listed CWE-89
Priority LOW 28
Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00669 · Published 2017-12-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 1 0 0
THREATIST.IORead the docs