Vulnerabilities

TI-2009-01568 CVE-2009-1652 · GHSA-m66m-fm83-29fc

admin/adminaddeditdetails.php in Business Community Script does not properly restrict…

MEDIUM 42

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06097 Published 2009-05-16 No fix listed CWE-264

TI-2009-01567 CVE-2009-1651 · GHSA-wpqf-85pg-jvcm

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community…

LOW 37

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02043 Published 2009-05-16 No fix listed CWE-89

Vulnerabilities

Filters

admin/adminaddeditdetails.php in Business Community Script does not properly restrict…

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community…