Vendors / Scripts-for-sites Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 15 CVSS 7.0–8.9
Exploited now Scripts-for-sites records in CISA KEV No Scripts-for-sites vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01003 · Published 2008-08-20 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical0 High15 Medium3 Low0 No CVSS0