Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2629▼ 216 respecto a la semana anterior

Críticas / altas1378▲ 154 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2014-4170	Modificada	Crítica (9.8)	14%	—	Freereprintables Articlefr	13/2/2020	17/6/2026	A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain access or modify or delete database information.
CVE-2015-6591	Modificada	Media (5.5)	0.58%	—	Freereprintables Articlefr	15/1/2020	17/6/2026	Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter.
CVE-2015-5530	Modificada	Media (6.8)	1.9%	—	Freereprintables Articlefr	16/7/2015	17/6/2026	Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/.
CVE-2015-5529	Modificada	Media (4.3)	4.0%	—	Freereprintables Articlefr	16/7/2015	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to…
CVE-2015-1364	Modificada	Alta (7.5)	1.3%	—	Freereprintables Articlefr	27/1/2015	17/6/2026	SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/.
CVE-2015-1363	Modificada	Media (4.3)	1.9%	—	Freereprintables Articlefr	27/1/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/.
CVE-2014-5097	Modificada	Alta (7.5)	2.3%	—	Freereprintables Articlefr	22/8/2014	17/6/2026	Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php.
CVE-2010-2136	Modificada	Media (6.8)	2.1%	—	Articlefriendly Article Friendly	2/6/2010	16/6/2026	Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
CVE-2009-3146	Modificada	Media (4.3)	1.0%	—	Articlefriend Script	10/9/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2008-3670	Modificada	Media (6.8)	1.1%	—	Articlefriendly Article Friendly	13/8/2008	16/6/2026	SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL commands via the autid parameter.
CVE-2008-3649	Modificada	Media (6.8)	1.1%	—	Articlefriendly Article Friendly	13/8/2008	16/6/2026	SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter.