Vulnerabilities > Adultscript

DATE CVE VULNERABILITY TITLE RISK
2007-12-28 CVE-2007-6576 SQL Injection vulnerability in Adultscript
Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) videolink_count.php or (2) links.php.
network
low complexity
adultscript CWE-89
7.5
2007-12-17 CVE-2007-6414 Credentials Management vulnerability in Adultscript 1.6
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credentials via a direct request.
network
low complexity
adultscript CWE-255
7.5