Availscript - vulnerabilities (CVEs)

9 CVEs in 5 products, 0 in the last 30 days, newest from 2009-08-21.

Products

Newest CVEs of Availscript

CVE-2008-7021 - CVSS 6 (medium), 2009-08-21: Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by…
CVE-2008-6900 - CVSS 6.5 (medium), 2009-08-06: Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to…
CVE-2008-6037 - CVSS 7.5 (high), 2009-02-03: SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter.
CVE-2008-4373 - CVSS 7.5 (high), 2008-10-01: SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid…
CVE-2008-4372 - CVSS 4.3 (medium), 2008-10-01: Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-4375 - CVSS 7.5 (high), 2008-10-01: SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2008-4370 - CVSS 4.3 (medium), 2008-10-01: Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid…
CVE-2008-4371 - CVSS 7.5 (high), 2008-10-01: SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.
CVE-2008-4369 - CVSS 7.5 (high), 2008-10-01: SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter.