Vulnerabilities

TI-2010-02409 CVE-2010-2510 · GHSA-7wj2-rwgf-hw3q

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows…

LOW 35

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2010-06-28 No fix listed CWE-89

TI-2010-02408 CVE-2010-2509 · GHSA-c42m-7vx7-wgq9

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parame…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01314 Published 2010-06-28 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows…

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software…