ScriptAndTools vulnerabilities
We track 8 vulnerabilities in ScriptAndTools products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2025.
Latest ScriptAndTools vulnerabilities
- 7.5 High severity
Real Estate Management System: Execution After Redirect (EAR)
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotel
- 9.8 Critical severity
Real Estate Management System: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. Th
- 8.1 High severity
Real Estate Management System: Improper Authorization
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads
- 9.8 Critical severity
Real-Estate-website-in-PHP: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql inject
- 9.8 Critical severity
Online-Travling-System: Incorrect Privilege Assignment
A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addpackage.php. The manipulation leads to improper access controls. The attack may be initiated
- 7.5 High severity
Online-Travling-System: Incorrect Privilege Assignment
A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addadvertisement.php. The manipulation leads to improper access controls. The attack can be ini
- 8.1 High severity
eCommerce-website-in-PHP: Improper Restriction of Excessive Authentication Attempts
A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authenticat
- 8.1 High severity
eCommerce-website-in-PHP: Improper Restriction of Excessive Authentication Attempts
A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible