Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2744▼ 71 respecto a la semana anterior

Críticas / altas1416▲ 184 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-3535	Modificada	Media (6.1)	0.36%	—	Simplephpscripts FAQ Script PHP	7/7/2023	17/6/2026	A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The…
CVE-2018-19457	Modificada	Alta (7.2)	3.9%	—	Logicspice FAQ Script	22/11/2018	17/6/2026	Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file.
CVE-2017-15988	Modificada	Crítica (9.8)	2.7%	—	Nicephpscripts Nice PHP FAQ Script	31/10/2017	17/6/2026	Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.
CVE-2008-6525	Modificada	Alta (7.5)	2.0%	—	Nicephpscripts Nice PHP FAQ Script	25/3/2009	16/6/2026	SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).
CVE-2005-3938	Analizada	Alta (7.5)	3.8%	—	Softbizscripts FAQ Script	1/12/2005	16/6/2026	SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article.php, or (5) add_comment.php.