Scriptsez

23 CVEs across 15 Scriptsez products. Browse Scriptsez vulnerabilities, severities, and proof-of-concept exploits.

Scriptsez products with known CVEs

ProductCVEs
Ez Blog3
Easy Image Downloader2
Ez Poll Hoster2
Ez Ringtone Manager2
Good\/bad Vote2
Mini Hosting Panel2
Power Editor2
Cute Guestbook1
Ez Album1
Ez Cart1
Ez PHP Comment1
Freeze Greetings1
Random PHP Quote1
Smart PHP Subscriber1
Ultimate Poll1
Scriptsez CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-09832012-02-02SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index…
CVE-2009-48262010-04-27Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of…
CVE-2009-46832010-03-10Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal seq…
CVE-2009-46822010-03-10Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a…
CVE-2009-43852009-12-22Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the authentication of arb…
CVE-2009-43842009-12-22Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inject arbitrary web script or HTML via the…
CVE-2009-43662009-12-21Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the yr parame…
CVE-2009-43652009-12-21Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of adminis…
CVE-2009-43642009-12-21Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cname paramet…
CVE-2009-43172009-12-14Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter…
CVE-2009-36012009-10-08Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr…
CVE-2009-25512009-07-20Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id…
CVE-2009-07622009-03-06Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NO…
CVE-2008-61122009-02-11Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a…
CVE-2008-60902009-02-06Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. (dot dot) in th…
CVE-2008-60892009-02-06Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (dot dot) in the id p…
CVE-2008-52182008-11-25ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.
CVE-2008-21162008-05-08Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local files via a .. (dot…
CVE-2008-21152008-05-08Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrary web script or HT…
CVE-2007-05182007-01-26Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers…
CVE-2007-05172007-01-26Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwo…
CVE-2006-30042006-06-13Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id paramet…
CVE-2006-22322006-05-05Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments f…