Vulnerabilities

TI-2008-02357 CVE-2008-2459 · GHSA-52rp-v38p-8vgp

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote…

LOW 34

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01929 Published 2008-05-27 No fix listed CWE-22

TI-2008-02293 CVE-2008-2393 · GHSA-xq84-h5w5-8fgh

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote…

LOW 35

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-05-21 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote…

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote…