VYPR
← All vendors
Vendor

Maianscriptworld

Products
12
CVEs
35
Across products
35
Status
Private

Products

12

Recent CVEs

35
View all 35 CVEs →
  • CVE-2008-7086Aug 26, 2009
    Maianscriptworld
    Greeting
    risk 0.04cvss —epss 0.07

    Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.

  • CVE-2008-3322Jul 25, 2008
    Maian Recipe
    Maian Recipe
    risk 0.04cvss —epss 0.07

    admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie.

  • CVE-2008-3317Jul 25, 2008
    Maianscriptworld
    Search
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary search_cookie cookie.

  • CVE-2008-3319Jul 25, 2008
    Maianscriptworld
    Links
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie.

  • CVE-2008-3320Jul 25, 2008
    Maianscriptworld
    Guestbook
    risk 0.04cvss —epss 0.07

    admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie.

  • CVE-2008-3318Jul 25, 2008
    Maianscriptworld
    Weblog
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_cookie cookie.

  • CVE-2008-3321Jul 25, 2008
    Maianscriptworld
    Uploader
    risk 0.04cvss —epss 0.08

    admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploader_cookie cookie.

  • CVE-2008-2202May 14, 2008
    Maianscriptworld
    Uploader
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2) msg_charset and (3) msg_header9 parameters to…

  • CVE-2006-1334Mar 21, 2006
    Maianscriptworld
    Weblog
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.

  • CVE-2014-10007Jan 13, 2015
    Maianscriptworld
    Weblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.

  • CVE-2014-10006Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uploader/admin/js/load_flv.js.php…

  • CVE-2014-10005Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.

  • CVE-2014-10004Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2014-10003Jan 13, 2015
    Maianscriptworld
    Uploader
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/load_flv.js.php.

  • CVE-2012-2405Apr 22, 2012
    Maianscriptworld
    Gallery
    risk 0.00cvss —epss 0.01

    Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.

  • CVE-2012-1113Apr 22, 2012
    Maianscriptworld
    Gallery
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-2200May 14, 2008
    Maianscriptworld
    Weblog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to…

  • CVE-2008-2208May 14, 2008
    Maianscriptworld
    Greeting
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action.

  • CVE-2008-2211May 14, 2008
    Maianscriptworld
    Guestbook
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters.

  • CVE-2008-2205May 14, 2008
    Maianscriptworld
    Music
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action.

View all 35 CVEs →