Scriptsez.net - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2007-02-24.

Products

• E-dating System - 3 CVEs
• Virtual Calendar - 1 CVEs

Newest CVEs of Scriptsez.net

• CVE-2006-7061 - CVSS 9.3 (critical), 2007-02-24: Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote…
• CVE-2006-7060 - CVSS 5 (medium), 2007-02-24: cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the…
• CVE-2006-7059 - CVSS 4.3 (medium), 2007-02-24: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded…
• CVE-2007-0952 - CVSS 6.8 (medium), 2007-02-15: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the…