Known Vulnerabilities for products from Yabsoft

Listed below are 7 of the newest known vulnerabilities associated with the vendor "Yabsoft".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2012-6039 json SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote ... 7.5 - HIGH 2012-11-26 2012-11-27
CVE-2009-4266 json Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, ... Not Provided 2009-12-10 2026-04-23
CVE-2009-3647 json Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows r... Not Provided 2009-10-09 2026-04-23
CVE-2009-1032 json SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to... Not Provided 2009-03-20 2026-04-23
CVE-2009-0966 json PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbi... Not Provided 2009-03-19 2026-04-23
CVE-2008-2536 json SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers... Not Provided 2008-06-03 2026-04-23
CVE-2008-2521 json SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authentica... Not Provided 2008-06-03 2026-04-23