Comscripts Web Server Creator Web Portal vulnerabilities
4 known vulnerabilities affecting comscripts/web_server_creator_web_portal.
Total CVEs
4
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2010-1114P3HIGHCVSS 7.5PoCv0.12010-03-25
CVE-2010-1114 [HIGH] CWE-94 CVE-2010-1114: Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remo
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to index.php and the (2) path parameter to news/form.php.
nvd
CVE-2008-6545P3HIGHCVSS 7.5PoCv0.12009-03-30
CVE-2008-6545 [HIGH] CWE-94 CVE-2008-6545: PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Porta
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
nvd
CVE-2010-1113P4MEDIUMCVSS 4.3PoCv0.12010-03-25
CVE-2010-1113 [MEDIUM] CWE-79 CVE-2010-1113: Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 al
Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php.
nvd
CVE-2010-1115P4MEDIUMCVSS 5.0v0.12010-03-25
CVE-2010-1115 [MEDIUM] CWE-22 CVE-2010-1115: Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
nvd