Scriptscenter Ezupload Pro — known CVE vulnerabilities

Every CVE whose affected-product data names Scriptscenter Ezupload Pro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2005-4308 — CVSS 7.5 (high): index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
• CVE-2005-4309 — CVSS 7.5 (high): SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified…
• CVE-2006-2694 — CVSS 7.5 (high): Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in…
• CVE-2006-3939 — CVSS 7.5 (high): ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php…