CVE-2008-1790

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability...

CVE-2008-1790

This CVE affects iScripts SocialWare . It describes an unrestricted file upload vulnerability where remote authenticated administrators can upload arbitrary files through a crafted logo file in the Manage Settings function. The exploit is noted to be facilitated by a separate SQL injection vulner...

CVE-2008-1790

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

Information disclosure

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1772

The CVE-2008-1772 entry concerns iScripts SocialWare, where passwords are stored in cleartext in the database. This creates an information disclosure risk because an attacker who can access the database could retrieve user credentials. The provided sources (NVD/NIST, CVE records) confirm the unde...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

iscripts-sql.txt

--==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 8 April 2008 SITE...

iScripts SocialWare (id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8u...

iScripts SocialWare (id) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================== iScripts SocialWare id Remote SQL Injection Vulnerbility ==========================================================...

iScripts Socialware - 'id' SQL Injection

--==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 8 April 2008 SITE...