Comscripts maintains a focused portfolio of web-based applications and server tools, including forum and portal platforms, where vulnerabilities concentrate in code-injection, path-traversal, and cross-site scripting weaknesses characteristic of web application input handling. This vendor's disclosures have a strong tendency toward public exploit availability, reflecting the accessibility and appeal of web-facing vulnerabilities to researchers and tool developers. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Comscripts over time
Signals from CVEs in this vendor scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-1114HIGH Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to | Mar 25, 2010 | 7.5 | 29 | NO | YES |
CVE-2008-6543HIGH Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) locate.php3, (3) search_results.p | Mar 30, 2009 | 7.5 | 29 | NO | YES |
CVE-2006-4746HIGH PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter. | Sep 13, 2006 | 7.5 | 29 | NO | YES |
CVE-2006-4622HIGH PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. | Sep 7, 2006 | 7.5 | 29 | NO | YES |
CVE-2008-6545HIGH PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the lan | Mar 30, 2009 | 7.5 | 28 | NO | YES |
CVE-2007-0361HIGH PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter. | Jan 19, 2007 | 7.5 | 28 | NO | YES |
CVE-2006-4678HIGH PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the _NE[AbsPath] parameter in (1) install.php and (2) migr | Sep 11, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-4754MEDIUM Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in | Sep 13, 2006 | 6.8 | 27 | NO | YES |
CVE-2007-4937MEDIUM CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a di | Sep 18, 2007 | 5.0 | 23 | NO | YES |
CVE-2006-4753MEDIUM Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. | Sep 13, 2006 | 5.0 | 23 | NO | YES |
Signals from CVEs in this vendor scope (19 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Comscripts.
Media articles that mention a CVE ID that affects a product developed by Comscripts — matched by CVE ID, not by vendor name.