Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Scriptsez

First CVE: May 5, 2006Active for: 20 yearsTotal CVEs: 23
26.6
VTI Score
Low

Scriptsez has a modest but focused portfolio of web-based applications including blogging, image-downloading, polling, and voting tools, where vulnerabilities recur persistently across multiple products. The vendor's durable exposure concentrates in application-layer input-handling and request-validation weaknesses—cross-site scripting, path traversal, SQL injection, and cross-site request forgery—reflecting the classic attack surface of server-side web applications with insufficient input sanitization and state protection. While the volume of disclosures is limited relative to large platform vendors, the prevalence of public exploit code for vulnerabilities in this class is notably high, making remediation and version tracking important for defenders deploying these tools. Organizations running Scriptsez applications should prioritize patching releases addressing input-validation and CSRF mitigations, and should treat the vendor's advisories as applicable to multiple products simultaneously. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
23
Total CVEs
More Total CVEs than 96% of tracked vendors
0.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 2% of tracked vendors
5.2
Avg CVSS Score
Higher Avg CVSS Score than 14% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Scriptsez over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 5, 2006
20 years ago
Most Recent CVE
Feb 2, 2012
5,286 days ago

Products(15 total)

Top CVEs

Signals from CVEs in this vendor scope (23 CVEs).

23 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2012-0983HIGH
SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
Feb 2, 20127.530NOYES
CVE-2009-4683HIGH
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id para
Mar 10, 20107.528NOYES
CVE-2007-0518HIGH
Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded pas
Jan 26, 20077.528NOYES
CVE-2009-4826MEDIUM
Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of administrators for r
Apr 27, 20106.826NOYES
CVE-2009-4385MEDIUM
Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the authentication of arbitrary users for requ
Dec 22, 20096.826NOYES
CVE-2009-3601MEDIUM
Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote
Oct 8, 20094.324NOYES
CVE-2008-6112MEDIUM
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a detail action to (1)
Feb 11, 20095.023NOYES
CVE-2008-6089MEDIUM
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a downloa
Feb 6, 20095.023NOYES
CVE-2008-5218MEDIUM
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.
Nov 25, 20085.023NOYES
CVE-2008-2116MEDIUM
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) te a
May 8, 20084.422NOYES
View all 23 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products23 CVEs
83%
17%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown23 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown23 (100.0%)
User Interaction
None0 (0.0%)
Unknown23 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown23 (100.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (23 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
18 CVEs
78.3% of CVEs· 85th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Scriptsez.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Scriptsez — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Scriptsez's Products

View all 1 CNAs →

Top CWEs