Vulnerabilities

Filters

Reset all

1 selected

25 records

Sort

Vendor: 2daybiz Clear all filters

TI-2011-04492 CVE-2011-5215 · GHSA-7fmx-9c6x-xx9j

SQL injection vulnerability in index.php in Video Community Portal allows remote…

LOW 37

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02023 Published 2012-10-25 No fix listed CWE-89

TI-2010-04742 CVE-2010-5019 · GHSA-hqm3-mj3r-89fx

SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows…

LOW 37

SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0204 Published 2011-11-02 No fix listed CWE-89

TI-2010-04741 CVE-2010-5018 · GHSA-3mj8-x4jc-gf23

Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in…

LOW 23

Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01482 Published 2011-11-02 No fix listed CWE-79

TI-2010-04738 CVE-2010-5015 · GHSA-4q62-43v6-g996

SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows…

LOW 35

SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01023 Published 2011-11-02 No fix listed CWE-89

TI-2010-04727 CVE-2010-5004 · GHSA-p424-vv3c-ff9x

SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script…

LOW 35

SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2011-11-02 No fix listed CWE-89

TI-2010-02582 CVE-2010-2692 · GHSA-j26h-pv9m-hqv4

Cross-site scripting (XSS) vulnerability in 2daybiz Custom T-Shirt Design Script allows…

LOW 23

Cross-site scripting (XSS) vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01708 Published 2010-07-09 No fix listed CWE-79

TI-2010-02581 CVE-2010-2691 · GHSA-p5h3-4856-8937

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow…

LOW 36

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parameter to products_details.php, (2) pid parameter to products/pr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01791 Published 2010-07-09 No fix listed CWE-89

TI-2010-02500 CVE-2010-2610 · GHSA-h5qj-6vv9-f5jh

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01187 Published 2010-07-01 No fix listed CWE-89

TI-2010-02499 CVE-2010-2609 · GHSA-6rpw-6v52-q2ff

SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script…

LOW 36

SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL commands via the keyword parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01356 Published 2010-07-01 No fix listed CWE-89

TI-2010-02415 CVE-2010-2516 · GHSA-g529-vgf8-7r78

Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing (MLM) Software…

LOW 35

Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing (MLM) Software allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) index.php and (2) admin/index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01013 Published 2010-06-29 No fix listed CWE-89

TI-2010-02411 CVE-2010-2512 · GHSA-3m5v-crmw-qqfm

SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows…

LOW 35

SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2010-06-28 No fix listed CWE-89

TI-2010-02410 CVE-2010-2511 · GHSA-22gj-5cj3-9837

SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM)…

LOW 35

SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-06-28 No fix listed CWE-89

TI-2010-02409 CVE-2010-2510 · GHSA-7wj2-rwgf-hw3q

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows…

LOW 35

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2010-06-28 No fix listed CWE-89

TI-2010-02408 CVE-2010-2509 · GHSA-c42m-7vx7-wgq9

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parame…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01314 Published 2010-06-28 No fix listed CWE-79

TI-2010-02407 CVE-2010-2508 · GHSA-rf7x-9hv2-ff2v

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script…

LOW 35

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-06-28 No fix listed CWE-89

TI-2010-02362 CVE-2010-2459 · GHSA-hq74-v35j-jc5r

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0…

LOW 35

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2010-06-25 No fix listed CWE-89

TI-2010-02361 CVE-2010-2458 · GHSA-f6mg-fwxg-7jhc

Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal…

LOW 23

Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2010-06-25 No fix listed CWE-79

TI-2010-01635 CVE-2010-1706 · GHSA-gp9r-98j2-7524

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow…

LOW 35

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password f…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01189 Published 2010-05-04 No fix listed CWE-89

TI-2010-01633 CVE-2010-1704 · GHSA-m68j-36qf-qjg5

Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow…

LOW 35

Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email paramete…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-05-04 No fix listed CWE-89

TI-2010-01632 CVE-2010-1703 · GHSA-254f-jwvx-j47x

Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to inject arbitrary web script or HTML via the (1) category parameter or (2) sear…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2010-05-04 No fix listed CWE-79

TI-2009-01732 CVE-2009-1820 · GHSA-gc5q-5hpv-qvhf

Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design…

LOW 23

Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-05-29 No fix listed CWE-79

TI-2009-01731 CVE-2009-1819 · GHSA-v3jp-xfmh-x2q5

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows…

LOW 35

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-05-29 No fix listed CWE-89

TI-2009-01682 CVE-2009-1767 · GHSA-q6mr-4q5f-3vh6

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative…

LOW 27

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstnam…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02084 Published 2009-05-22 No fix listed CWE-264

TI-2009-01568 CVE-2009-1652 · GHSA-m66m-fm83-29fc

admin/adminaddeditdetails.php in Business Community Script does not properly restrict…

MEDIUM 42

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06097 Published 2009-05-16 No fix listed CWE-264

TI-2009-01567 CVE-2009-1651 · GHSA-wpqf-85pg-jvcm

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community…

LOW 37

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02043 Published 2009-05-16 No fix listed CWE-89