CVE-2008-6783

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6778

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778

The CVE-2008-6778 issue is a SQL injection in viewfaqs.php of Scripts for Sites (SFS) EZ Auction. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat parameter. Documents confirm the affected component (viewfaqs.php) and the injection vector (cat parameter) wit...

CVE-2008-6783

CVE-2008-6783 describes a SQL injection vulnerability in directory.php of Sites for Scripts (SFS) EZ Home Business Directory. The affected component is the directory list action, where the parameter cat_id can be manipulated to inject SQL commands, enabling remote attackers to execute arbitrary S...

CVE-2008-6782

The CVE-2008-6782 entry concerns a SQL injection vulnerability in directory.php of the Sites for Scripts (SFS) EZ Hosting Directory. The issue arises when an attacker provides a crafted cat_id value in a list action, allowing remote command execution against the database. According to the NVD ent...

CVE-2008-6780

The CVE-2008-6780 entry describes an SQL injection vulnerability in directory.php of Scripts for Sites (SFS) EZ Affiliate. The issue allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. No version-specific details are provided in the documents. Publ...

Sql injection

SQL injection vulnerability in category.php in Scripts For Sites SFS EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6244

SQL injection vulnerability in viewreviews.php in Scripts for Sites SFS EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6242

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

CVE-2008-6242

The CVE-2008-6242 issue affects Scripts For Sites (SFS) EZ e-store, where an SQL injection vulnerability exists in SearchResults.php via the where parameter. This allows remote attackers to execute arbitrary SQL commands against the application's database, with potential impact to confidentiality...

CVE-2008-6247

CVE-2008-6247 affects Scripts For Sites (SFS) EZ Top Sites, with a SQL injection in topsite.php exploitable via the ts parameter. The vulnerability occurs in user input handling that allows arbitrary SQL commands to be executed by an attacker remotely. Connected sources confirm the affected compo...

CVE-2008-6245

CVE-2008-6245 affects Scripts For Sites (SFS) EZ BIZ PRO. The vulnerability is a SQL injection in track.php, exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE listing notes high impact with network access and no authentication. No remediation d...

CVE-2008-6243

The CVE-2008-6243 entry describes an SQL injection vulnerability in showcategory.php of a Scripts For Sites (SFS) Hotscripts-like site. The vulnerability arises from unsanitized input in the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated references corr...

CVE-2008-6246

CVE-2008-6246 describes an SQL injection vulnerability in the category.php script of Scripts For Sites (SFS) EZ Webring. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat parameter, potentially impacting the database. Documents explicitly state the affected c...

CVE-2008-6244

CVE-2008-6244 describes a SQL injection in the Scripts for Sites (SFS) EZ Gaming Cheats, specifically in the file/view function view_reviews.php. The vulnerability occurs via the id parameter and allows remote attackers to execute arbitrary SQL commands, enabling data access or manipulation. The ...

CVE-2008-6245

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6237

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6237

CVE-2008-6237 is an SQL injection in Scripts For Sites EZ Hotscripts/ SFS-like site via software-description.php (parameter id). Root cause: insufficient input sanitization before SQL usage. Impact per provided sources: remote attacker can execute arbitrary SQL commands; data compromise or modifi...

Cross site scripting

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0532

CVE-2009-0532 describes a Cross-Site Scripting (XSS) flaw in password.php of Scripts For Sites (SFS) EZ Baby. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially involving the u2 parameter. The NVD entry lists a base score of 4.3 (...