Aggregates CVE and security vulnerability intelligence across all scubez-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Common weakness patterns include vendor risk sql injection and vendor risk cross-site scripting, with potential vendor impact data exposure and vendor impact session compromise across vendor surface production workloads use cases.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2017-17569 | Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter. | [email protected] | 6.1 | 0.67% | 2017-12-13 | 2026-06-16 |
| CVE-2017-17568 | Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request. | [email protected] | 7.5 | 1.38% | 2017-12-13 | 2026-06-16 |
| CVE-2017-17567 | Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter. | [email protected] | 7.5 | 1.15% | 2017-12-13 | 2026-06-16 |
| CVE-2017-17111 | Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request. | [email protected] | 9.8 | 8.80% | 2017-12-11 | 2026-06-16 |