VYPR
← All vendors
Vendor

Maianscriptworld

Products
13
CVEs
37
Across products
37
Status
Private

Products

13

Recent CVEs

37
View all 37 CVEs →
  • CVE-2021-32172CriOct 7, 2021
    Maian Cart
    Maian Cart
    risk 0.72cvss 9.8epss 0.66

    Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.

  • CVE-2021-39402HigSep 20, 2021
    Maianmedia
    Maianaffiliate
    risk 0.47cvss 7.2epss 0.01

    MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.

  • CVE-2008-7086Aug 26, 2009
    Maianscriptworld
    Greeting
    risk 0.04cvss —epss 0.07

    Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.

  • CVE-2008-3321Jul 25, 2008
    Maianscriptworld
    Uploader
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploader_cookie cookie.

  • CVE-2008-3317Jul 25, 2008
    Maianscriptworld
    Search
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary search_cookie cookie.

  • CVE-2008-3320Jul 25, 2008
    Maianscriptworld
    Guestbook
    risk 0.04cvss —epss 0.07

    admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie.

  • CVE-2008-3318Jul 25, 2008
    Maianscriptworld
    Weblog
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_cookie cookie.

  • CVE-2008-3322Jul 25, 2008
    Maian Recipe
    Maian Recipe
    risk 0.04cvss —epss 0.07

    admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie.

  • CVE-2008-3319Jul 25, 2008
    Maianscriptworld
    Links
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie.

  • CVE-2008-2202May 14, 2008
    Maianscriptworld
    Uploader
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2) msg_charset and (3) msg_header9 parameters to…

  • CVE-2006-1334Mar 21, 2006
    Maianscriptworld
    Weblog
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.

  • CVE-2014-10007Jan 13, 2015
    Maianscriptworld
    Weblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.

  • CVE-2014-10006Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php…

  • CVE-2014-10005Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.

  • CVE-2014-10004Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2014-10003Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.

  • CVE-2012-2405Apr 22, 2012
    Maianscriptworld
    Gallery
    risk 0.00cvss —epss 0.01

    Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.

  • CVE-2012-1113Apr 22, 2012
    Maianscriptworld
    Gallery
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-2200May 14, 2008
    Maianscriptworld
    Weblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to…

  • CVE-2008-2209May 14, 2008
    Maianscriptworld
    Greeting
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script and (2) msg_script2 parameters.

View all 37 CVEs →