Vulnerabilities

TI-2009-04693 CVE-2009-4937 · GHSA-qvmw-935f-m857

Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01131 Published 2010-07-22 No fix listed CWE-79

TI-2009-04692 CVE-2009-4936 · GHSA-5hrf-qvr7-jrc9

Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote…

LOW 36

Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to the default URI in an rss .xml action, or the id parameter to (2)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01828 Published 2010-07-22 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote…

Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote…