3 matches found
Sql injection
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
5CVSS8.1AI score0.01145EPSS
SaveExploits1References1
CVE-2017-17569
Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...
6.1AI score0.00669EPSS
SaveExploits1References1
CVE-2017-17568
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...
7.4AI score0.01384EPSS
SaveExploits1References1
20