Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2747▼ 495 respecto a la semana anterior
Críticas / altas1308▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.99% | 💥 Exploit | E-soft24 Banner Exchange Script | 22/9/2010 | 16/6/2026 | SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter. | |
| Modificada | Media (4.3) | 1.1% | — | Ljscripts Auto-surf Traffic Exchange Script | 30/12/2009 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php. | |
| Modificada | Alta (10) | 3.7% | 💥 Exploit | Skalinks Exchange Script | 19/8/2009 | 16/6/2026 | Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php. | |
| Modificada | Alta (7.5) | 0.99% | 💥 Exploit | Yourfreeworld Ad-exchange Script | 21/8/2008 | 16/6/2026 | SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
| Modificada | Alta (7.8) | 1.8% | — | Super Link Exchange Script | 23/2/2007 | 16/6/2026 | Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter. | |
| Modificada | Media (6.8) | 1.2% | — | Super Link Exchange Script | 23/2/2007 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box. | |
| Modificada | Alta (7.5) | 1.1% | — | Super Link Exchange Script | 23/2/2007 | 16/6/2026 | SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter. | |
| Analizada | Media (4.3) | 1.8% | 💥 Exploit | Softbizscripts Banner Exchange Script | 18/7/2006 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php,… |