Vulnerabilities

TI-2008-01786 CVE-2008-1859 · GHSA-v47g-rq9v-p4vr

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers…

LOW 35

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-04-16 No fix listed CWE-89

TI-2008-01717 CVE-2008-1790 · GHSA-7r8h-pf5c-m2pr

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated…

LOW 31

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01084 Published 2008-04-15 No fix listed CWE-264

TI-2008-01700 CVE-2008-1772 · GHSA-62r2-c7rp-f6pf

iScripts SocialWare stores passwords in cleartext in a database, which allows…

LOW 28

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02483 Published 2008-04-14 No fix listed CWE-310

Vulnerabilities

Filters

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers…

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated…

iScripts SocialWare stores passwords in cleartext in a database, which allows…