Vulnerabilities

TI-2009-04447 CVE-2009-4691 · GHSA-pvcc-9pgw-68v2

SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote…

LOW 35

SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the slctCategories parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2010-03-10 No fix listed CWE-89

TI-2009-04445 CVE-2009-4689 · GHSA-5j7r-m8gm-mhjj

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script…

LOW 35

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2010-03-10 No fix listed CWE-89

TI-2009-04444 CVE-2009-4688 · GHSA-72cm-h79h-7p2p

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0307 Published 2010-03-10 No fix listed CWE-79

TI-2009-02475 CVE-2009-2590 · GHSA-226c-wpq4-r9cj

SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows…

LOW 35

SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01199 Published 2009-07-24 No fix listed CWE-89

TI-2009-02474 CVE-2009-2589 · GHSA-4r65-cmrj-vf2r

Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpas…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01341 Published 2009-07-24 No fix listed CWE-79

TI-2009-02473 CVE-2009-2588 · GHSA-x9w7-hxvq-9xhr

Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lost…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02211 Published 2009-07-24 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote…

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script…

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart…

SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows…

Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script…

Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script…