VendorsAvailscriptavailscript_article_scriptany version
Vulnerabilities

Availscript Availscript Article Script any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2008-4371
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter.
Published 2008-10-01 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6037
SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter.
Published 2009-02-03 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6900
Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/.
Published 2009-08-06 · Modified
6.51 PoCEPSS 0.033
CVE-2008-4372
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter.
Published 2008-10-01 · Modified
4.31 PoCEPSS 0.015