Hotwebscripts - vulnerabilities (CVEs)

8 CVEs in 3 products, 0 in the last 30 days, newest from 2011-02-16.

Products

• Cms Mundo - 4 CVEs
• Hotweb Rentals - 3 CVEs
• Weblog Oggi - 1 CVEs

Newest CVEs of Hotwebscripts

• CVE-2010-4737 - CVSS 7.5 (high), 2011-02-16: SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort…
• CVE-2010-4703 - CVSS 7.5 (high), 2011-01-20: SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter.…
• CVE-2009-3343 - CVSS 7.5 (high), 2009-09-24: SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter.
• CVE-2006-3135 - CVSS 7.5 (high), 2006-07-13: Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via…
• CVE-2006-2931 - CVSS 5.1 (medium), 2006-06-21: CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and…
• CVE-2006-2911 - CVSS 7.5 (high), 2006-06-21: SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-2820 - CVSS 4.3 (medium), 2006-06-05: Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment,…
• CVE-2006-2684 - CVSS 5.8 (medium), 2006-05-31: Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the…