WEB Hosting Directory Script

DATE	CVE	VULNERABILITY TITLE	RISK
2008-05-06	CVE-2008-2087	SQL Injection vulnerability in Softbiz web Hosting Directory Script SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817. network softbiz CWE-89	6.8
2005-11-26	CVE-2005-3817	SQL Injection vulnerability in Softbiz web Hosting Directory Script Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module. network low complexity softbiz CWE-89	7.5