Vulnerabilities > Scriptsez > Easy Image Downloader > Medium

DATE CVE VULNERABILITY TITLE RISK
2009-07-20 CVE-2009-2551 Cross-Site Scripting vulnerability in Scriptsez Easy Image Downloader
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php.
network
scriptsez CWE-79
4.3
2009-02-06 CVE-2008-6089 Path Traversal vulnerability in Scriptsez Easy Image Downloader
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a ..
network
low complexity
scriptsez CWE-22
5.0