Vulnerabilities > Freewebscriptz > Hubscript

DATE CVE VULNERABILITY TITLE RISK
2009-10-08 CVE-2009-3600 Information Exposure vulnerability in Freewebscriptz Hubscript 1.0
HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function.
network
low complexity
freewebscriptz CWE-200
5.0
5.0
2009-10-08 CVE-2009-3599 Cross-Site Scripting vulnerability in Freewebscriptz Hubscript 1.0
Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bid_id parameter. 		4.3
4.3