TI-2008-06469 CVE-2008-6780 · GHSA-mh56-vfvr-8vx4SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate…Priority LOW 35SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00999 · Published 2009-05-01 · No fix listed CWE-89