Vulnerabilities

TI-2008-02093 CVE-2008-2181 · GHSA-jq85-2gq2-6xg4

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2008-05-13 No fix listed CWE-79

TI-2008-02092 CVE-2008-2180 · GHSA-ppw5-2f8h-2w3p

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is…

LOW 32

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/i…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00979 Published 2008-05-13 No fix listed CWE-89

TI-2007-05195 CVE-2007-5408 · GHSA-rqfv-p8m4-r85f

SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers…

LOW 32

SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00974 Published 2007-10-12 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow…

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is…

SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers…