Availscript Article Script (Availscript) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2009-08-06. Vendor: Availscript.

CVEs of Availscript Article Script

• CVE-2008-6900 - CVSS 6.5 (medium), 2009-08-06: Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to…
• CVE-2008-6037 - CVSS 7.5 (high), 2009-02-03: SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter.
• CVE-2008-4371 - CVSS 7.5 (high), 2008-10-01: SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.
• CVE-2008-4372 - CVSS 4.3 (medium), 2008-10-01: Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the…