Vulnerabilities

TI-2008-06731 CVE-2008-7043 · GHSA-x37r-g85h-gf6h

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email…

LOW 23

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2009-08-24 No fix listed CWE-79

TI-2008-06730 CVE-2008-7042 · GHSA-3hwv-6ww9-fwqx

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0…

LOW 37

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02307 Published 2009-08-24 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email…

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0…