Vulnerabilities > Scriptsfeed

DATE CVE VULNERABILITY TITLE RISK
2011-11-02 CVE-2010-5039 SQL Injection vulnerability in Scriptsfeed Recipes Listing Portal 1.0
SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field).
network
low complexity
scriptsfeed CWE-89
7.5
2010-07-28 CVE-2010-2906 SQL Injection vulnerability in multiple products
SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-2905.
network
low complexity
brotherscripts scriptsfeed CWE-89
7.5
2010-07-28 CVE-2010-2905 SQL Injection vulnerability in multiple products
SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
brotherscripts scriptsfeed CWE-89
7.5
2010-03-24 CVE-2010-1096 SQL Injection vulnerability in Scriptsfeed Dating Software
Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameters.
network
low complexity
scriptsfeed CWE-89
7.5
2010-03-24 CVE-2010-1092 SQL Injection vulnerability in Scriptsfeed Business Directory Software
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.
network
low complexity
scriptsfeed CWE-89
7.5
2009-08-12 CVE-2008-6944 Improper Input Validation vulnerability in Scriptsfeed Auto Classifieds
Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/.
network
low complexity
scriptsfeed CWE-20
6.5
2009-08-12 CVE-2008-6943 Improper Input Validation vulnerability in Scriptsfeed Recipes Listing Portal
Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/.
network
low complexity
scriptsfeed CWE-20
6.5
2009-08-12 CVE-2008-6942 Improper Input Validation vulnerability in Scriptsfeed Realtor Classifieds System
Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.
network
low complexity
scriptsfeed CWE-20
6.5