Vulnerabilities (CVE)

Filtered by vendor Easyscripts Subscribe
Filtered by product Tr Script News
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-1957 1 Easyscripts 1 Tr Script News 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.
CVE-2008-1958 1 Easyscripts 1 Tr Script News 2023-12-10 6.5 MEDIUM N/A
Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension.