Xtreme Scripts - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2006-06-12.

Products

• Xtreme Topsites - 3 CVEs
• Download Manager - 1 CVEs

Newest CVEs of Xtreme Scripts

• CVE-2006-2964 - CVSS 7.5 (high), 2006-06-12: Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow remote attackers to execute arbitrary…
• CVE-2006-2544 - CVSS 5.1 (medium), 2006-05-23: Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via…
• CVE-2006-2543 - CVSS 5.1 (medium), 2006-05-23: Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php.
• CVE-2006-2545 - CVSS 2.6 (low), 2006-05-23: Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id…