Vulnerabilities

TI-2010-04762 CVE-2010-5039 · GHSA-w74q-4m8r-xv4f

SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing…

LOW 35

SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01021 Published 2011-11-02 No fix listed CWE-89

TI-2010-02779 CVE-2010-2906 · GHSA-x745-x857-q9jc

SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS)…

LOW 35

SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-07-28 No fix listed CWE-89

TI-2010-02778 CVE-2010-2905 · GHSA-gw52-6qvc-qghx

SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts…

LOW 35

SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2010-07-28 No fix listed CWE-89

TI-2010-01055 CVE-2010-1096 · GHSA-7vw9-rv8f-9gr2

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software…

LOW 35

Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2010-03-24 No fix listed CWE-89

TI-2010-01051 CVE-2010-1092 · GHSA-9g3p-5mff-vc5c

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory…

LOW 35

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0115 Published 2010-03-24 No fix listed CWE-89

TI-2008-06632 CVE-2008-6944 · GHSA-6q86-57jm-rpfx

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote…

LOW 36

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03954 Published 2009-08-12 No fix listed CWE-20

TI-2008-06631 CVE-2008-6943 · GHSA-4j95-c34m-8x48

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows…

LOW 36

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03949 Published 2009-08-12 No fix listed CWE-20

TI-2008-06630 CVE-2008-6942 · GHSA-v828-7vvf-4p87

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka…

LOW 36

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03949 Published 2009-08-12 No fix listed CWE-20

Vulnerabilities

Filters