Maniacomputer Mcshoutbox vulnerabilities
3 known vulnerabilities affecting maniacomputer/mcshoutbox.
Total CVEs
3
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2009-3715P3MEDIUMCVSS 6.8PoCv1.12009-10-16
CVE-2009-3715 [MEDIUM] CWE-89 CVE-2009-3715: Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is
Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
nvd
CVE-2009-3716P3MEDIUMCVSS 6.5PoCv1.12009-10-16
CVE-2009-3716 [MEDIUM] CWE-264 CVE-2009-3716: Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated us
Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in smilies/.
nvd
CVE-2009-3714P4MEDIUMCVSS 4.3PoCv1.12009-10-16
CVE-2009-3714 [MEDIUM] CWE-79 CVE-2009-3714: Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attacker
Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter.
nvd