Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▲ 13 respecto a la semana anterior

Críticas / altas1459▲ 323 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-17930	Modificada	Alta (8.8)	0.51%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
CVE-2017-17929	Modificada	Media (4.8)	0.54%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
CVE-2017-17928	Modificada	Crítica (9.8)	1.2%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
CVE-2017-17927	Modificada	Media (5.3)	1.5%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
CVE-2017-17926	Modificada	Media (5.3)	1.1%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
CVE-2017-17925	Modificada	Media (4.8)	0.54%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.
CVE-2017-17924	Modificada	Media (5.3)	1.5%	—	Ordermanagementscript Professional Service Script	27/12/2017	17/6/2026	PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php.