Vulnerabilities > 1Scripts

DATE CVE VULNERABILITY TITLE RISK
2009-03-02 CVE-2008-6392 SQL Injection vulnerability in 1Scripts Z1Exchange 1.0
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
1scripts CWE-89
7.5
2009-03-02 CVE-2008-6386 Cross-Site Scripting vulnerability in 1Scripts Z1Exchange 1.0
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
network
1scripts CWE-79
4.3
2009-02-25 CVE-2008-6284 SQL Injection vulnerability in 1Scripts Z1Exchange 1.0
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter.
network
low complexity
1scripts CWE-89
7.5
2008-07-16 CVE-2008-3190 Path Traversal vulnerability in 1Scripts Codedb 1.1.1
Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a ..
network
1scripts CWE-22
6.8