Vulnerabilities

TI-2008-06709 CVE-2008-7021 · GHSA-cqp9-hhmj-77gv

Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script…

LOW 32

Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, t…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02735 Published 2009-08-21 No fix listed

TI-2008-06588 CVE-2008-6900 · GHSA-24x4-44mg-fffp

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in…

LOW 35

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable exten…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03334 Published 2009-08-06 No fix listed CWE-94

TI-2008-05733 CVE-2008-6037 · GHSA-wm5c-jvr6-54mg

SQL injection vulnerability in view.php in AvailScript Article Script allows remote…

LOW 35

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2009-02-03 No fix listed CWE-89

TI-2008-04173 CVE-2008-4375 · GHSA-wwjw-jrgv-wj9c

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows…

LOW 35

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-01 No fix listed CWE-89

TI-2008-04171 CVE-2008-4373 · GHSA-668c-m73x-9945

SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script…

LOW 35

SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-01 No fix listed CWE-89

TI-2008-04170 CVE-2008-4372 · GHSA-rm45-5489-5prf

Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script…

LOW 23

Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0149 Published 2008-10-01 No fix listed CWE-79

TI-2008-04169 CVE-2008-4371 · GHSA-jj8r-phf2-8h4q

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote…

LOW 35

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2008-10-01 No fix listed CWE-89

TI-2008-04168 CVE-2008-4370 · GHSA-q89c-f58f-4x7j

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-10-01 No fix listed CWE-79

TI-2008-04167 CVE-2008-4369 · GHSA-fw27-96f7-xwpc

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote…

LOW 35

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-01 No fix listed CWE-89

Vulnerabilities

Filters