Dcforumlite (Dcscripts) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2006-04-26. Vendor: Dcscripts.

CVEs of Dcforumlite

• CVE-2006-2050 - CVSS 5 (medium), 2006-04-26: SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter.
• CVE-2006-2049 - CVSS 4.3 (medium), 2006-04-26: Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az…