CVE-2010-0366

no score yetEPSS 3.5%

Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2010-01-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bitscripts:bits_video_script

References

http://osvdb.org/61826
http://secunia.com/advisories/38252
http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/55738
http://osvdb.org/61826

Check your stack JSON