Deltascripts - vulnerabilities (CVEs)

21 CVEs in 6 products, 0 in the last 30 days, newest from 2011-10-08.

Products

• Php Classifieds - 12 CVEs
• Php Links - 3 CVEs
• Pro Publish - 3 CVEs
• Php Manualmaker - 1 CVEs
• Php Pro Publish - 1 CVEs
• Php Shop - 1 CVEs

Newest CVEs of Deltascripts

• CVE-2010-4914 - CVSS 7.5 (high), 2011-10-08: PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code…
• CVE-2008-6720 - CVSS 7.5 (high), 2009-04-13: SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-5806 - CVSS 7.5 (high), 2008-12-31: SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-5805 - CVSS 7.5 (high), 2008-12-31: SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-5648 - CVSS 7.5 (high), 2008-12-17: SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via the admin_username…
• CVE-2008-0565 - CVSS 6.8 (medium), 2008-02-05: SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-0566 - CVSS 6.8 (medium), 2008-02-05: PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code…
• CVE-2007-2254 - CVSS 7.5 (high), 2007-04-25: PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute…
• CVE-2006-5828 - CVSS 7.5 (high), 2006-11-10: SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-5520 - CVSS 7.5 (high), 2006-10-26: PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL…
• CVE-2006-5208 - CVSS 7.5 (high), 2006-10-10: Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in…
• CVE-2006-3330 - CVSS 6.8 (medium), 2006-06-30: Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands…
• CVE-2006-3329 - CVSS 7.5 (high), 2006-06-30: SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate…
• CVE-2006-2876 - CVSS 6.8 (medium), 2006-06-07: Cross-site scripting (XSS) vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary web script or HTML via the catname…
• CVE-2006-2821 - CVSS 6.8 (medium), 2006-06-05: Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1)…
• CVE-2006-2803 - CVSS 6.8 (medium), 2006-06-03: Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id…
• CVE-2006-2128 - CVSS 7.5 (high), 2006-05-01: Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password…
• CVE-2006-2129 - CVSS 5.5 (medium), 2006-05-01: Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain…
• CVE-2006-1532 - CVSS 4.3 (medium), 2006-03-30: Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary…
• CVE-2006-0719 - CVSS 7.5 (high), 2006-02-15: SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2002-1702 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL…