CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危6.1 |
iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. |
| 16/04/2018 |
| CVE-2018-10135 | 中危6.1 | iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel. | 16/04/2018 |
| CVE-2018-10052 | 中危4.8 | iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter. | 11/04/2018 |
| CVE-2018-10051 | 中危5.4 | iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter. | 11/04/2018 |
| CVE-2018-10050 | 高危7.2 | iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel. | 11/04/2018 |
| CVE-2018-10049 | 中危4.8 | iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel. | 11/04/2018 |
| CVE-2018-10048 | 高危8.8 | iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. | 11/04/2018 |
| CVE-2018-9237 | 中危5.4 | iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field. | 04/04/2018 |
| CVE-2018-9236 | 中危5.4 | iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field. | 04/04/2018 |
| CVE-2018-9235 | 中危6.1 | iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php. | 04/04/2018 |
| CVE-2013-7190 | 中危5.0 | Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1) tmpid parameter to websitebuilder/showtemplateimage.php, (2) fname parameter to admin/downloadfile.php, or (3) id parameter to support/admin/csvdownload.php; or (4) have an unspe | 20/12/2013 |
| CVE-2013-7189 | 高危7.5 | Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno parameter to payinvoiceothers.php. | 20/12/2013 |
| CVE-2010-5036 | 高危7.5 | SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. | 02/11/2011 |
| CVE-2010-5035 | 中危4.3 | Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE: some of these details are obtained from third party information. | 02/11/2011 |
| CVE-2010-5034 | 高危7.5 | SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter. | 02/11/2011 |
| CVE-2010-4983 | 高危7.5 | SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 01/11/2011 |