Vulnerabilities

TI-2006-06777 CVE-2006-7035 · GHSA-mpv3-qh2q-c372

Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0…

LOW 38

Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01819 Published 2007-02-23 No fix listed

TI-2006-06776 CVE-2006-7034 · GHSA-r7f2-c5m7-rh47

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might…

LOW 35

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01105 Published 2007-02-23 No fix listed

TI-2006-06775 CVE-2006-7033 · GHSA-fv92-9qm6-q689

Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote…

LOW 32

Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01191 Published 2007-02-23 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0…

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might…

Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote…