Vulnerabilities

TI-2008-02560 CVE-2008-2678 · GHSA-4cqq-5g7w-w4rv

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc…

LOW 37

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) code parameter in a confirm_data action to edit1…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02056 Published 2008-06-12 No fix listed CWE-89

TI-2008-02559 CVE-2008-2677 · GHSA-c53x-4hw4-h68r

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2008-06-12 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc…

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows…