PatchTheCVEcomscripts vulnerabilities
Recent CVEs affecting comscripts products. 19 tracked.
comscripts has 19 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2010-03-25. Highest priority: CVE-2010-1114 (score 53/100).
- CVE-2010-1115 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows
- CVE-2010-1114 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attacke
- CVE-2010-1113 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remot
- CVE-2008-6655 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbi
- CVE-2008-6545 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allo
- CVE-2008-6543 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_R
- CVE-2007-4937 MEDIUM 5.0 MITIGATE CS Guestbook stores sensitive information under the web root with insufficient access control, which allows re
- CVE-2007-1144 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to li
- CVE-2007-0361 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execut
- CVE-2006-4754 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject a
- CVE-2006-4753 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary
- CVE-2006-4746 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote
- CVE-2006-4678 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary P
- CVE-2006-4622 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers
- CVE-2006-3171 MEDIUM 5.0 UPGRADE CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers
- CVE-2006-3170 MEDIUM 5.0 UPGRADE CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, po
- CVE-2006-3169 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inj
- CVE-2006-3168 HIGH 7.5 UPGRADE SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands
- CVE-2002-2217 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allo
FAQ
How do I fix comscripts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is comscripts being exploited right now?
None of the tracked comscripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which comscripts CVE should I patch first?
CVE-2010-1114 currently ranks highest (53/100): Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attacke.