Stadtaus develops a narrow set of web-application and content-management scripts, including download managers, guestbooks, and form-handling utilities, that skew toward serious severity outcomes. The vendor's exposure recurs through code-injection and insufficient-input-control weaknesses characteristic of server-side scripting, and public exploit code has frequently been made available for these flaws. Current exploitation activity and severity distribution are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Stadtaus over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-4290CRITICAL Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete | Aug 9, 2007 | 9.8 | 30 | NO | NO |
CVE-2005-0678HIGH PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root | May 2, 2005 | 7.5 | 29 | NO | YES |
CVE-2005-0680HIGH PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_r | Mar 7, 2005 | 7.5 | 29 | NO | YES |
CVE-2008-6602HIGH Unspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack vectors related to "A minor security fix." | Apr 3, 2009 | 10.0 | 25 | NO | NO |
CVE-2005-0679HIGH PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the | May 2, 2005 | 7.5 | 20 | NO | NO |
CVE-2006-2158MEDIUM Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary p | May 3, 2006 | 6.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Stadtaus.
Media articles that mention a CVE ID that affects a product developed by Stadtaus — matched by CVE ID, not by vendor name.