Xtreme Scripts

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xtreme Scripts records in CISA KEV

No Xtreme Scripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xtreme Topsites 3 records LOW Download Manager 1 record LOW

Records

3 records in Xtreme Topsites · all components

TI-2006-02474 CVE-2006-2543 · GHSA-8mcx-cfxm-5pmr

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct…

LOW 26

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01202 Published 2006-05-23 No fix listed

TI-2006-02475 CVE-2006-2544 · GHSA-x3qx-39vp-3vph

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc…

LOW 25

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php and (2) id parameter…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0108 Published 2006-05-23 No fix listed

TI-2006-02476 CVE-2006-2545 · GHSA-47rj-gfhj-2qrm

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote…

LOW 16

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php, pro…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01163 Published 2006-05-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	1
No CVSS	0