X10media's vulnerability profile centers on a small portfolio of web-based content-management and media-serving applications, including adult content platforms and automated MP3 script products, where the recurring weakness classes reflect typical input-handling shortcomings in web application design. The vendor's disclosures concentrate on cross-site scripting, code injection, and SQL injection vulnerabilities that frequently acquire public exploit code, consistent with the permissive nature of these flaws and the accessibility of web-application exploitation tooling. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by X10media over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-4141HIGH Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the web_root paramet | Sep 24, 2008 | 7.5 | 30 | NO | YES |
CVE-2009-4730HIGH SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id parameter. | Mar 18, 2010 | 7.5 | 28 | NO | YES |
CVE-2008-6960MEDIUM download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by o | Aug 12, 2009 | 5.0 | 25 | NO | YES |
CVE-2009-4729MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to incl | Mar 18, 2010 | 4.3 | 22 | NO | YES |
CVE-2009-3153MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to inc | Sep 10, 2009 | 4.3 | 21 | NO | YES |
CVE-2010-0320MEDIUM Cross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter. | Jan 15, 2010 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by X10media.
Media articles that mention a CVE ID that affects a product developed by X10media — matched by CVE ID, not by vendor name.