Vulnerabilities

TI-2006-01197 CVE-2006-1238 · GHSA-xwg3-q63r-8hgc

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote…

LOW 27

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02018 Published 2006-03-15 No fix listed

TI-2006-01196 CVE-2006-1237 · GHSA-hxrr-q74x-223r

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc…

LOW 37

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01896 Published 2006-03-15 No fix listed

TI-2006-01193 CVE-2006-1234 · GHSA-7vgw-xx44-4cc5

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc…

LOW 31

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variabl…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.05218 Published 2006-03-14 No fix listed

TI-2006-01191 CVE-2006-1232 · GHSA-j84m-25fq-fh3h

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled…

MEDIUM 42

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) dow…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05854 Published 2006-03-14 No fix listed

TI-2006-01176 CVE-2006-1217 · GHSA-q2cr-q3g4-67c9

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary…