Vulnerabilities > Iscripts

DATE CVE VULNERABILITY TITLE RISK
2018-04-11 CVE-2018-10048 Cross-Site Request Forgery (CSRF) vulnerability in Iscripts Eswap 2.4
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.
network
low complexity
iscripts CWE-352
8.8
8.8
2018-04-04 CVE-2018-9237 Cross-site Scripting vulnerability in Iscripts Easycreate 3.2.1
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
network
low complexity
iscripts CWE-79
5.4
5.4
2018-04-04 CVE-2018-9236 Cross-site Scripting vulnerability in Iscripts Easycreate 3.2.1
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
network
low complexity
iscripts CWE-79
5.4
5.4
2018-04-04 CVE-2018-9235 Cross-site Scripting vulnerability in Iscripts Sonicbb 1.0
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.
network
low complexity
iscripts CWE-79
6.1
6.1