Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2914	Modificada	Media (4.3)	0.85%	—	Xzeroscripts Xzero Community Classifieds	21/8/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2009-2913	Modificada	Media (4.3)	0.85%	—	Xzeroscripts Xzero Community Classifieds	21/8/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2009-2893	Modificada	Media (4.3)	1.5%	💥 Exploit	Xzeroscripts Xzero Community Classifieds	20/8/2009	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter.
CVE-2007-6566	Modificada	Alta (7.5)	2.4%	💥 Exploit	Xzero Scripts Xzero Community Classifieds	28/12/2007	16/6/2026	SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.
CVE-2007-6567	Modificada	Media (6.4)	7.0%	💥 Exploit	Xzero Scripts Xzero Community Classifieds	28/12/2007	16/6/2026	Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter in a page view action.
CVE-2007-6568	Modificada	Alta (7.5)	2.3%	💥 Exploit	Xzero Scripts Xzero Community Classifieds	28/12/2007	16/6/2026	PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter.