Webasyst

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Webasyst records in CISA KEV

No Webasyst vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shop-script 3 records LOW Webasyst 1 record MEDIUM

Records

3 records in Shop-script · all components

TI-2010-04582 CVE-2010-4859 · GHSA-gfm8-q2c2-q3gf

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers…

LOW 35

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01154 Published 2011-10-05 No fix listed CWE-89

TI-2014-06888 CVE-2014-8377 · GHSA-4287-jrmh-3f8x

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01427 Published 2014-10-21 No fix listed CWE-79

TI-2010-01417 CVE-2010-1464 · GHSA-cq2c-xv58-j963

Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) light…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-04-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	5
Low	0
No CVSS	0