Vulnerabilities

TI-2010-01050 CVE-2010-1091 · GHSA-79r8-88qh-96vm

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) city, (3) email, (4) state, and (5) message parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2010-03-24 No fix listed CWE-79

TI-2010-01049 CVE-2010-1090 · GHSA-4hh8-c783-68vf

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute…

LOW 35

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2010-03-24 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow…

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute…