Maianscriptworld - vulnerabilities (CVEs)

21 CVEs in 13 products, 0 in the last 30 days, newest from 2021-10-07.

Products

Maian Uploader - 4 CVEs
Maian Cart - 3 CVEs
Maian Greeting - 2 CVEs
Maian Music - 2 CVEs
Maian Search - 2 CVEs
Maian Weblog - 2 CVEs
Maian Gallery - 1 CVEs
Maian Greetings - 1 CVEs
Maian Guestbook - 1 CVEs
Maian Links - 1 CVEs
Maian Recipe - 1 CVEs
Maian Support - 1 CVEs
Maianaffiliate - 0 CVEs

Newest CVEs of Maianscriptworld

CVE-2021-32172 - CVSS 9.8 (critical), 2021-10-07: Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
CVE-2014-10007 - CVSS 4.3 (medium), 2015-01-13: Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2014-10006 - CVSS 6.8 (medium), 2015-01-13: Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for…
CVE-2014-10005 - CVSS 5 (medium), 2015-01-13: Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the…
CVE-2014-10004 - CVSS 7.5 (high), 2015-01-13: SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-7086 - CVSS 7.5 (high), 2009-08-26: Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.
CVE-2008-2209 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary web script or…
CVE-2008-2213 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML…
CVE-2008-2201 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML…
CVE-2008-2210 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script,…
CVE-2008-2212 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2008-2208 - CVSS 7.5 (high), 2008-05-14: SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a…
CVE-2008-2211 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or…
CVE-2008-2206 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords…
CVE-2008-2204 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML…
CVE-2008-2200 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords…
CVE-2008-2207 - CVSS 4.3 (medium), 2008-05-14: Cross-site scripting (XSS) vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-2205 - CVSS 7.5 (high), 2008-05-14: SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album…
CVE-2008-2203 - CVSS 7.5 (high), 2008-05-14: SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search…
CVE-2008-2202 - CVSS 4.3 (medium), 2008-05-14: Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords…
CVE-2008-1075 - CVSS 4.3 (medium), 2008-02-29: Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords…