1scripts - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2009-03-02.

Products

• Z1exchange - 3 CVEs
• Codedb - 1 CVEs

Newest CVEs of 1scripts

• CVE-2008-6392 - CVSS 7.5 (high), 2009-03-02: SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
• CVE-2008-6386 - CVSS 4.3 (medium), 2009-03-02: Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
• CVE-2008-6284 - CVSS 7.5 (high), 2009-02-25: SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter.
• CVE-2008-3190 - CVSS 6.8 (medium), 2008-07-16: Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot)…