Vulnerabilities

TI-2007-02260 CVE-2007-2342 · GHSA-r6xx-c56h-r63m

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote…

LOW 35

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-6083.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2007-04-27 No fix listed

TI-2006-05851 CVE-2006-6083 · GHSA-fw9m-8rv8-x2vp

SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote…

LOW 35

SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01226 Published 2006-11-24 No fix listed

TI-2006-05850 CVE-2006-6082 · GHSA-jh7p-cmpq-rp5m

Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to se…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01926 Published 2006-11-24 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote…

SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow…