Vulnerabilities

TI-2008-06220 CVE-2008-6530 · GHSA-6xx7-89q7-8hw4

Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1…

LOW 33

Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then acc…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0212 Published 2009-03-26 No fix listed

TI-2008-06219 CVE-2008-6529 · GHSA-m445-462c-5qvg

Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1…

LOW 23

Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01598 Published 2009-03-26 No fix listed CWE-79

TI-2008-03782 CVE-2008-3943 · GHSA-cxgw-6684-hhgv

SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows…

LOW 35

SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-09-05 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1…

Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1…

SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows…