Xzero Scripts

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xzero Scripts records in CISA KEV

No Xzero Scripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xzero Community Classifieds 3 records LOW

Records

3 records in Xzero Community Classifieds · all components

TI-2007-06264 CVE-2007-6567 · GHSA-7p7x-rfv5-5c5j

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and…

LOW 38

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.07021 Published 2007-12-28 No fix listed CWE-22

TI-2007-06265 CVE-2007-6568 · GHSA-27rp-767p-m9wx

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds…

LOW 37

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0227 Published 2007-12-28 No fix listed CWE-94

TI-2007-06263 CVE-2007-6566 · GHSA-749r-hq33-5497

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and…

LOW 37

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02375 Published 2007-12-28 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0