Vulnerabilities > Scriptsfeed
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2011-11-02 | CVE-2010-5039 | SQL Injection vulnerability in Scriptsfeed Recipes Listing Portal 1.0 SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field). | 7.5 |
2010-07-28 | CVE-2010-2906 | SQL Injection vulnerability in multiple products SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-2905. | 7.5 |
2010-07-28 | CVE-2010-2905 | SQL Injection vulnerability in multiple products SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
2010-03-24 | CVE-2010-1096 | SQL Injection vulnerability in Scriptsfeed Dating Software Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameters. | 7.5 |
2010-03-24 | CVE-2010-1092 | SQL Injection vulnerability in Scriptsfeed Business Directory Software Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters. | 7.5 |
2009-08-12 | CVE-2008-6944 | Improper Input Validation vulnerability in Scriptsfeed Auto Classifieds Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/. | 6.5 |
2009-08-12 | CVE-2008-6943 | Improper Input Validation vulnerability in Scriptsfeed Recipes Listing Portal Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/. | 6.5 |
2009-08-12 | CVE-2008-6942 | Improper Input Validation vulnerability in Scriptsfeed Realtor Classifieds System Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/. | 6.5 |