Vulnerabilities

TI-2007-02415 CVE-2007-2499 · GHSA-h8pf-qhq6-5c94

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.ph…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01401 Published 2007-05-04 No fix listed

TI-2007-00772 CVE-2007-0794 · GHSA-r3qr-j593-ccqw

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote…

LOW 35

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01161 Published 2007-02-06 No fix listed CWE-89

TI-2007-00771 CVE-2007-0793 · GHSA-mvp8-cmc7-7ww6

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6…

LOW 36

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01426 Published 2007-02-06 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote…

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote…

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6…