PHP Web Scripts' vulnerability profile centers on a small collection of web-based applications including ad management, link aggregation, photo gallery, and banner-rotation tools, which typically operate in shared-hosting environments. The recurring signal is SQL injection across these products, a durable input-handling weakness common to web applications, while public exploit code has frequently been available for this vendor's disclosures. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Php Web Scripts over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4843HIGH SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter. | Sep 27, 2011 | 7.5 | 33 | NO | YES |
CVE-2006-3192HIGH PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspe | Jun 23, 2006 | 7.5 | 32 | NO | YES |
CVE-2010-4784MEDIUM Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary | Apr 7, 2011 | 6.8 | 31 | NO | YES |
CVE-2009-4349MEDIUM Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for | Dec 17, 2009 | 6.8 | 29 | NO | YES |
CVE-2007-0178HIGH PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter. | Jan 11, 2007 | 7.5 | 29 | NO | YES |
CVE-2008-1162HIGH SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter. | Mar 5, 2008 | 7.5 | 28 | NO | YES |
CVE-2006-5166HIGH PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] param | Oct 5, 2006 | 7.5 | 28 | NO | YES |
CVE-2005-4233HIGH SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter. | Dec 14, 2005 | 7.5 | 28 | NO | YES |
CVE-2009-4828MEDIUM Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 allows remote attackers to hijack the authentication of admini | Apr 27, 2010 | 6.8 | 26 | NO | YES |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject | Apr 7, 2011 | 2.6 | 21 | NO | YES |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Php Web Scripts.
Media articles that mention a CVE ID that affects a product developed by Php Web Scripts — matched by CVE ID, not by vendor name.