Vulnerabilities > Scripts FOR Sites > Medium

DATE CVE VULNERABILITY TITLE RISK
2009-02-11 CVE-2009-0533 Cross-Site Scripting vulnerability in Scripts-For-Sites EZ Reminder
Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.
4.3
2009-02-11 CVE-2009-0532 Cross-Site Scripting vulnerability in Scripts-For-Sites EZ Baby
Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.
4.3
2008-10-27 CVE-2008-4754 SQL Injection vulnerability in Scripts-For-Sites EZ Forum
SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.
low complexity
scripts-for-sites CWE-89
5.8