Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2556▼ 352 respecto a la semana anterior

Críticas / altas1335▲ 66 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior

39 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-17617	Modificada	Crítica (9.8)	3.0%	—	Foodspotting Clone Script Project Foodspotting Clone Script	13/12/2017	17/6/2026	Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
CVE-2017-17615	Modificada	Alta (8.8)	2.5%	—	Facebook Clone Script Project Facebook Clone Script	13/12/2017	17/6/2026	Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
CVE-2017-17605	Modificada	Crítica (9.8)	3.0%	—	Consumer Complaints Clone Script Project Consumer Complaints Clone Script	13/12/2017	17/6/2026	Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
CVE-2017-17597	Modificada	Crítica (9.8)	3.0%	—	Nearbuy Clone Script Project Nearbuy Clone Script	13/12/2017	17/6/2026	Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
CVE-2017-15993	Modificada	Crítica (9.8)	2.7%	—	Zomato Clone Script Project Zomato Clone Script	31/10/2017	17/6/2026	Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.
CVE-2015-4658	Modificada	Alta (7.5)	1.3%	—	Milw0rm Project Milw0rm Clone Script	18/6/2015	17/6/2026	Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.
CVE-2015-4137	Modificada	Alta (7.5)	2.5%	—	Milw0rm Project Milw0rm Clone Script	29/5/2015	17/6/2026	SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.
CVE-2011-5209	Modificada	Media (4.3)	1.6%	—	Cloneforest Graphicsclone Script	9/10/2012	16/6/2026	Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter.
CVE-2009-2588	Modificada	Media (4.3)	2.2%	—	Resalecode Hotscripts Type PHP Clone Script	24/7/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php.
CVE-2008-6162	Modificada	Alta (7.5)	2.6%	—	Bux.to Clone Script	20/2/2009	16/6/2026	Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1 and the usNick cookie to admin.
CVE-2008-0687	Modificada	Alta (7.5)	1.4%	—	Youtube Clone Script	12/2/2008	16/6/2026	Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter.
CVE-2007-6084	Modificada	Alta (7.5)	1.0%	—	Hotscripts Clone Script	22/11/2007	16/6/2026	SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-3773	Modificada	Alta (9.3)	1.8%	—	Generic Youtube Clone Script	15/7/2007	16/6/2026	Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators.
CVE-2007-3518	Modificada	Alta (7.5)	1.2%	—	Hispah Youtube Clone Script	3/7/2007	16/6/2026	SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute arbitrary SQL commands via the id parameter.