Vulnerabilities

TI-2008-03977 CVE-2008-4146 · GHSA-35vx-q8fx-9jg2

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions…

LOW 27

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02195 Published 2008-09-19 No fix listed CWE-287

TI-2008-03976 CVE-2008-4145 · GHSA-9v5x-c64h-25w9

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier…

LOW 32

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00939 Published 2008-09-19 No fix listed CWE-89

Vulnerabilities

Filters

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions…

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier…