Uploadscript

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Uploadscript records in CISA KEV

No Uploadscript vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uploadscript 3 records MEDIUM Uploadimage 2 records MEDIUM

Records

3 records in Uploadscript · all components

TI-2008-00228 CVE-2008-0246 · GHSA-6234-8gq6-2wgj

admin.php in UploadScript 1.0 does not check for the original password before making a…

MEDIUM 49

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Pass…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0353 Published 2008-01-12 No fix listed CWE-264

TI-2006-06125 CVE-2006-6377 · GHSA-5fxm-f9cm-4wmg

Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient…

LOW 39

Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03136 Published 2006-12-07 No fix listed

TI-2008-00227 CVE-2008-0245 · GHSA-5m25-6r69-wf79

admin.php in UploadImage 1.0 does not check for the original password before making a…

LOW 37

admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Passw…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02335 Published 2008-01-12 No fix listed CWE-264

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0