CVE-2007-6124

Cross-site scripting XSS vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...

CVE-2007-6125

CVE-2007-6125 is a SQL injection vulnerability in the Softbiz Freelancers Script 1, exploitable via the sb_protype parameter in search_form.php. The issue allows remote attackers to execute arbitrary SQL commands; impact vectors are stated as partial confidentiality, integrity, and availability. ...

CVE-2007-6124

CVE-2007-6124 describes a cross-site scripting (XSS) vulnerability in the Softbiz Freelancers Script 1, specifically in signin.php. The vulnerability allows a remote attacker to inject arbitrary web script or HTML by supplying a value for the errmsg parameter. The NVD entry lists a MEDIUM base sc...

CVE-2007-6125: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchform.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sbprotype parameter...