Vulnerabilities > Websitesrus

DATE CVE VULNERABILITY TITLE RISK
2010-08-25 CVE-2009-4985 SQL Injection vulnerability in Websitesrus Accessories ME PHP Affiliate Script 1.4
SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter.
network
low complexity
websitesrus CWE-89
7.5
2010-08-25 CVE-2009-4984 Cross-Site Scripting vulnerability in Websitesrus Accessories ME PHP Affiliate Script 1.4
Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php.
4.3