Vulnerabilities

TI-2017-13122 CVE-2017-17893 · GHSA-fc37-v4fv-jgg4

Readymade Video Sharing Script has XSS via the search_video.php search parameter, the…

LOW 28

Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-12-24 No fix listed CWE-79

TI-2017-13121 CVE-2017-17892 · GHSA-f9g7-qcxx-r329

Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or…

MEDIUM 44

Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2017-12-24 No fix listed CWE-89

TI-2017-13120 CVE-2017-17891 · GHSA-c539-q8fv-q5v4

Readymade Video Sharing Script has CSRF via user-profile-edit.php.

LOW 39

Readymade Video Sharing Script has CSRF via user-profile-edit.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00505 Published 2017-12-24 No fix listed CWE-352

TI-2017-12917 CVE-2017-17649 · GHSA-r72h-qv83-vm45

Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

LOW 32

Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02506 Published 2017-12-18 No fix listed CWE-94

TI-2017-12898 CVE-2017-17627 · GHSA-vprp-2v9g-mvjw

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.

MEDIUM 46

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2017-12-13 No fix listed CWE-89

Vulnerabilities

Filters

Readymade Video Sharing Script has XSS via the search_video.php search parameter, the…

Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or…

Readymade Video Sharing Script has CSRF via user-profile-edit.php.

Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.