← Back

Scriptsez.net

scriptsez.net

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
E Dating System
e-dating_system
3 CVEs
Virtual Calendar
virtual_calendar
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-7061
1Scriptsez.net
1E Dating System
Apr 23, 2026
Feb 24, 2007
N/A· v4
N/A· v3
9.3 HIGH· v2
Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site...Show more
Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting (XSS) attacks.Show less
CVE-2006-7060
1Scriptsez.net
1E Dating System
Apr 23, 2026
Feb 24, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message.
CVE-2006-7059
1Scriptsez.net
1E Dating System
Apr 23, 2026
Feb 24, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities (&#0000039) in IMG tags to (1) messages, (2) profile...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities (&#0000039) in IMG tags to (1) messages, (2) profile fields, or (3) the id parameter in a dologin operation to cindex.php.Show less
CVE-2007-0952
1Scriptsez.net
1Virtual Calendar
Apr 23, 2026
Feb 15, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range.Show less