VYPR
← All vendors
Vendor

Mapos Scripts

Products
7
CVEs
11
Across products
11
Status
Private

Products

7

Recent CVEs

11
  • CVE-2017-16919MedNov 21, 2017
    Mapos Project
    Mapos
    risk 0.35cvss 5.4epss 0.01

    MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.

  • CVE-2007-4328Aug 14, 2007
    Mapos Scripts
    Bilder Galerie
    risk 0.04cvss —epss 0.06

    Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) galerie.php, or (3) anzagien.php. NOTE: A later report states that 1.1 is…

  • CVE-2007-4329Aug 14, 2007
    Web News
    Web News
    risk 0.04cvss —epss 0.07

    Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) news.php, or (3) feed.php.

  • CVE-2007-4325Aug 14, 2007
    Gaestebuch
    Gaestebuch
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter.

  • CVE-2007-4327Aug 14, 2007
    File Uploader
    File Uploader
    risk 0.03cvss —epss 0.03

    Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php or (2) datei.php.

  • CVE-2007-4330Aug 14, 2007
    Mapos Scripts
    Shoutbox
    risk 0.03cvss —epss 0.03

    PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.

  • CVE-2022-48327MedFeb 16, 2023
    Mapos Scripts
    MapOS
    risk 0.00cvss 6.1epss 0.01

    Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) dataInicial, (2) dataFinal, (3) tipocliente, (4) format, (5) precoInicial, (6) precoFinal, (7) estoqueInicial, (8) estoqueFinal,…

  • CVE-2022-48326MedFeb 16, 2023
    Mapos Scripts
    MapOS
    risk 0.00cvss 6.1epss 0.01

    Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) nome, (2) aCliente, (3) eCliente, (4) dCliente, (5) vCliente, (6) aProduto, (7) eProduto, (8) dProduto, (9) vProduto, (10)…

  • CVE-2022-48325MedFeb 16, 2023
    Mapos Scripts
    MapOS
    risk 0.00cvss 6.1epss 0.01

    Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) year, (2) oldSenha, (3) novaSenha, (4) termo, (5) nome, (6) cnpj, (7) ie, (8) cep, (9) logradouro, (10) numero, (11) bairro, (12)…

  • CVE-2022-48324MedFeb 16, 2023
    Mapos Scripts
    MapOS
    risk 0.00cvss 6.1epss 0.01

    Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) pesquisa, (2) data, (3) data2, (4) nome, (5) descricao, (6) idDocumentos, (7) id in file application/controllers/Arquivos.php; (8)…

  • CVE-2007-4326Aug 14, 2007
    Bilder Uploader
    Bilder Uploader
    risk 0.00cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) gruppen.php, (2) bild.php, (3) feed.php, (4) mitglieder.php, (5) online.php, (6) profil.php, and…