Phpscriptsnow operates a small portfolio of web-based applications including trivia, astrology, and educational tools that share a common vulnerability signature centered on client-side and database-layer input handling. The recurring exposure reflects classic web-application weaknesses: cross-site scripting and SQL injection flaws that arise from insufficient input sanitization, typical of older or rapidly developed web scripts where output encoding and parameterized queries have not been consistently applied. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Phpscriptsnow over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-2888HIGH SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter. | Aug 20, 2009 | 7.5 | 29 | NO | YES |
CVE-2009-2891HIGH SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter. | Aug 20, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-2885HIGH SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL commands via the rank parameter. | Aug 20, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-2890MEDIUM Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter. | Aug 20, 2009 | 4.3 | 23 | NO | YES |
CVE-2009-2889MEDIUM Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter. | Aug 20, 2009 | 4.3 | 22 | NO | YES |
CVE-2009-4685MEDIUM Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTML via the day parameter. | Mar 10, 2010 | 4.3 | 21 | NO | YES |
CVE-2009-2884MEDIUM Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrary web script or HTML via the rank parame | Aug 20, 2009 | 4.3 | 21 | NO | YES |
CVE-2009-2886HIGH SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter. | Aug 20, 2009 | 7.5 | 19 | NO | NO |
CVE-2009-4715MEDIUM Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter. | Mar 15, 2010 | 4.3 | 14 | NO | NO |
CVE-2009-2887MEDIUM Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter. | Aug 20, 2009 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Phpscriptsnow.
Media articles that mention a CVE ID that affects a product developed by Phpscriptsnow — matched by CVE ID, not by vendor name.