Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior
Críticas / altas1279▼ 60 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 1.0% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 5/1/2020 | 17/6/2026 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection. | |
| Modificada | Media (6.1) | 0.70% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 5/1/2020 | 17/6/2026 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS. | |
| Modificada | Media (5.4) | 0.55% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 10/8/2018 | 17/6/2026 | PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile. | |
| Modificada | Media (6.5) | 0.94% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 10/8/2018 | 17/6/2026 | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile. | |
| Modificada | Alta (8) | 0.45% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 10/8/2018 | 17/6/2026 | PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/eventlist.php cast parameter. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter. | |
| Modificada | Media (6.8) | 0.40% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has CSRF via admin/movieedit.php. | |
| Modificada | Media (4.8) | 0.49% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 3/1/2018 | 17/6/2026 | Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter. | |
| Modificada | Crítica (9.8) | 3.0% | — | Advanced Real Estate Script Project Advanced Real Estate Script | 13/12/2017 | 17/6/2026 | Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter. |