Vendor
Scubez
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-17111 | Cri | 0.68 | 9.8 | 0.18 | Dec 11, 2017 | Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request. | |
| CVE-2017-17568 | Hig | 0.49 | 7.5 | 0.00 | Dec 13, 2017 | Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request. | |
| CVE-2017-17567 | Hig | 0.49 | 7.5 | 0.00 | Dec 13, 2017 | Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter. | |
| CVE-2017-17569 | Med | 0.40 | 6.1 | 0.00 | Dec 13, 2017 | Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter. |