Vulnerabilities

TI-2010-01448 CVE-2010-1498 · GHSA-frxf-86wq-56jg

Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02166 Published 2010-04-23 No fix listed CWE-89

TI-2010-01447 CVE-2010-1497 · GHSA-82vp-cv9f-7fjj

Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0…

LOW 25

Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02381 Published 2010-04-23 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to…

Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0…