Vulnerabilities (CVE)

Filtered by vendor Iscripts Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10136 1 Iscripts 1 Uberforx 2018-05-21 4.3 MEDIUM 6.1 MEDIUM
iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.
CVE-2018-10135 1 Iscripts 1 Eswap 2018-05-17 4.3 MEDIUM 6.1 MEDIUM
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.
CVE-2018-10051 1 Iscripts 1 Supportdesk 2018-05-09 3.5 LOW 5.4 MEDIUM
iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter.
CVE-2018-10052 1 Iscripts 1 Supportdesk 2018-05-09 3.5 LOW 4.8 MEDIUM
iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter.
CVE-2018-10049 1 Iscripts 1 Eswap 2018-05-09 3.5 LOW 4.8 MEDIUM
iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel.
CVE-2018-9236 1 Iscripts 1 Easycreate 2018-05-02 3.5 LOW 5.4 MEDIUM
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
CVE-2018-9237 1 Iscripts 1 Easycreate 2018-05-02 3.5 LOW 5.4 MEDIUM
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
CVE-2018-9235 1 Iscripts 1 Sonicbb 2018-05-02 4.3 MEDIUM 6.1 MEDIUM
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.