Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.67% | — | Marketplace Script Project Marketplace Script | 4/10/2018 | 17/6/2026 | PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword. | |
| Modificada | Crítica (9.8) | 3.0% | 💥 Exploit | ON Demand Marketplace Script Project ON Demand Marketplace Script | 13/12/2017 | 17/6/2026 | Professional Service Script 1.0 has SQL Injection via the service-list city parameter. | |
| Modificada | Media (4.3) | 1.2% | 💥 Exploit | Edgephp Clickbank Affiliate Marketplace Script | 12/7/2010 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to inject arbitrary web script or HTML via the search parameter. | |
| Modificada | Alta (7.5) | 0.96% | 💥 Exploit | Edgephp Clickbank Affiliate Marketplace Script | 12/7/2010 | 16/6/2026 | SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to execute arbitrary SQL commands via the search parameter. | |
| Modificada | Alta (7.5) | 1.0% | 💥 Exploit | E-php Scripts B2B Trading Marketplace Script | 7/10/2008 | 16/6/2026 | SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action. | |
| Analizada | Alta (7.5) | 1.3% | 💥 Exploit | Softbizscripts B2B Trading Marketplace Script | 1/12/2005 | 16/6/2026 | SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php. |