MediumCVSS 6.1
EPSS 0.67%
Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
Vendor
scubez vulnerabilities
4 published CVES affecting scubez, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 1
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest scubez CVEs
Newest publication first
-
-
HighCVSS 7.5 EPSS 1.4%
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
-
HighCVSS 7.5 EPSS 1.1%
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
-
CriticalCVSS 9.8 EPSS 8.8% Public exploit
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.