Vulnerabilities

Filters

Reset all

1 selected

27 records

Sort

Vendor: Softbizscripts Clear all filters

TI-2010-04628 CVE-2010-4905 · GHSA-vc5w-cx9v-3hp7

SQL injection vulnerability in article_details.php in Softbiz Article Directory Script…

LOW 35

SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01019 Published 2011-10-08 No fix listed CWE-89

TI-2010-00725 CVE-2010-0758 · GHSA-98fj-2mhw-486f

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to…

LOW 35

SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2010-02-27 No fix listed CWE-89

TI-2009-02656 CVE-2009-2790 · GHSA-m645-386w-2j36

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote…

LOW 35

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00983 Published 2009-08-17 No fix listed CWE-89

TI-2009-02139 CVE-2009-2232 · GHSA-5wvh-4wwc-wh7w

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows…

LOW 35

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01125 Published 2009-06-26 No fix listed CWE-89

TI-2008-06018 CVE-2008-6325 · GHSA-fp9h-x589-26vm

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) radio parameter to showcategory.php, (2) msg parameter to advert…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01492 Published 2009-02-27 No fix listed CWE-79

TI-2008-05999 CVE-2008-6306 · GHSA-w7jq-2qq5-jhx9

Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script…

LOW 23

Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2009-02-26 No fix listed CWE-79

TI-2008-03363 CVE-2008-3511 · GHSA-mgxv-q3xg-wrqj

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01514 Published 2008-08-07 No fix listed CWE-79

TI-2008-02748 CVE-2008-2874 · GHSA-c23j-93x4-f392

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows…

LOW 35

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-06-26 No fix listed CWE-89

TI-2008-02007 CVE-2008-2087 · GHSA-hp6g-q29f-jr3v

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script…

LOW 33

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01375 Published 2008-05-06 No fix listed CWE-89

TI-2008-01004 CVE-2008-1050 · GHSA-7xxq-87gw-ppv9

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows…

LOW 35

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00957 Published 2008-02-27 No fix listed CWE-89

TI-2007-05845 CVE-2007-6125 · GHSA-9g63-8qxx-3j95

SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows…

LOW 36

SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01504 Published 2007-11-26 No fix listed CWE-89

TI-2007-05844 CVE-2007-6124 · GHSA-p9vq-4x36-h8pq

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1…

LOW 24

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01999 Published 2007-11-26 No fix listed CWE-79

TI-2007-05737 CVE-2007-5999 · GHSA-rpr9-8jrq-2f24

SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote…

LOW 35

SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2007-11-15 No fix listed CWE-89

TI-2007-05736 CVE-2007-5998 · GHSA-45g2-wqp2-rh43

SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows…

LOW 30

SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execute arbitrary SQL commands via the package parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00869 Published 2007-11-15 No fix listed CWE-89

TI-2007-05735 CVE-2007-5997 · GHSA-rq77-jwg8-cmgx

SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network…

LOW 30

SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00869 Published 2007-11-15 No fix listed CWE-89

TI-2007-05734 CVE-2007-5996 · GHSA-rhwg-2g63-9m63

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows…

LOW 35

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter, a related issue to CVE-2007-5449.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2007-11-15 No fix listed CWE-89

TI-2007-05235 CVE-2007-5449 · GHSA-jhhx-fc29-rwx8

SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows…

LOW 36

SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01441 Published 2007-10-14 No fix listed CWE-89

TI-2007-05116 CVE-2007-5316 · GHSA-pv84-jfm6-v66r

SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script…

LOW 26

SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01389 Published 2007-10-09 No fix listed CWE-89

TI-2007-04934 CVE-2007-5122 · GHSA-p99r-h7pr-4h3v

SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote…

LOW 35

SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2007-09-27 No fix listed CWE-89

TI-2006-03499 CVE-2006-3607 · GHSA-cvpm-j255-vr8g

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01764 Published 2006-07-14 No fix listed

TI-2006-03170 CVE-2006-3271 · GHSA-cmp6-xw5c-rm8q

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to…

LOW 36

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01327 Published 2006-06-28 No fix listed

TI-2006-01607 CVE-2006-1660 · GHSA-8248-p6ph-v7qm

Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery…

LOW 32

Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01148 Published 2006-04-07 No fix listed

TI-2006-01606 CVE-2006-1659 · GHSA-xc36-g67x-cvq3

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to…

LOW 33

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid paramet…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02182 Published 2006-04-07 No fix listed

TI-2005-03731 CVE-2005-3938 · GHSA-rvh5-44hf-h5w5

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers…

LOW 39

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in (1) index.php, (2) faq_qanda.php, (3) refer_friend.php, (4) print_article…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03816 Published 2005-12-01 No fix listed

TI-2005-03730 CVE-2005-3937 · GHSA-68m4-gw7r-wgrq

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler…

LOW 36

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01348 Published 2005-12-01 No fix listed