Scriptphp - vulnerabilities (CVEs)

9 CVEs in 4 products, 0 in the last 30 days, newest from 2008-05-16.

Products

Annoncescripthp - 3 CVEs
Pronews - 3 CVEs
Messageriescripthp - 2 CVEs
Picengine - 1 CVEs

Newest CVEs of Scriptphp

CVE-2008-2280 - CVSS 4.3 (medium), 2008-05-16: Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2006-6580 - CVSS 6.4 (medium), 2006-12-15: admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information…
CVE-2006-6520 - CVSS 6.8 (medium), 2006-12-14: Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo…
CVE-2006-6518 - CVSS 6.8 (medium), 2006-12-14: Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2)…
CVE-2006-6521 - CVSS 7.5 (high), 2006-12-14: SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter.
CVE-2006-6519 - CVSS 7.5 (high), 2006-12-14: SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter.
CVE-2006-6480 - CVSS 5 (medium), 2006-12-12: admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses…
CVE-2006-6479 - CVSS 6.8 (medium), 2006-12-12: Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email…
CVE-2006-6478 - CVSS 7.5 (high), 2006-12-12: Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a)…