Readymade Video Sharing Script CVEs and Security Vulnerabilities

CVE-2017-17627

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed

Vendors

Readymade Video Sharing Script Project

Products

Readymade Video Sharing Script

CVE-2017-17649

Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

CVSS 3.0 · 6.1 Medium EPSS 2.5% KEV · Not listed

Vendors

Readymade Video Sharing Script Project

Products

Readymade Video Sharing Script

CVE-2017-17891

Readymade Video Sharing Script has CSRF via user-profile-edit.php.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Readymade Video Sharing Script Project

Products

Readymade Video Sharing Script

CVE-2017-17892

Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Readymade Video Sharing Script Project

Products

Readymade Video Sharing Script

CVE-2017-17893

Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Readymade Video Sharing Script Project

Products

Readymade Video Sharing Script

Search vulnerabilities