Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Phpscriptsmall Clear all filters
TI-2019-15733 CVE-2019-25680 · GHSA-ggj6-j7q8-jc3j

Advance Gift Shop Pro Script 2.0.3 SQL Injection via search

Priority HIGH 77

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00404 Published 2026-04-05 No fix listed CWE-89
TI-2019-15729 CVE-2019-25676 · GHSA-p86f-7g2v-f63j

Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection

Priority HIGH 77

Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00483 Published 2026-04-05 No fix listed CWE-79
TI-2019-15721 CVE-2019-25668 · GHSA-wr46-gg95-jg49

News Website Script 2.0.5 SQL Injection via index.php

Priority HIGH 77

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00416 Published 2026-04-05 No fix listed CWE-89
TI-2019-15498 CVE-2019-25445 · GHSA-mv55-hjp6-qw4c

Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php

Priority MEDIUM 56

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00253 Published 2026-02-20 No fix listed CWE-79
TI-2019-15497 CVE-2019-25444 · GHSA-fgjg-x2hx-m8rf

Fiverr Clone Script 1.2.2 SQL Injection via page Parameter

Priority HIGH 79

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00433 Published 2026-02-20 No fix listed CWE-89
TI-2018-11692 CVE-2018-16326 · GHSA-qg6g-6gmh-3jhw

PHP Scripts Mall Olx Clone 3.4.2 has XSS.

Priority LOW 28

PHP Scripts Mall Olx Clone 3.4.2 has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-10-04 No fix listed CWE-79