CVE-2008-6720

CVE-2008-6720 describes an SQL injection in DeltaScripts PHP Links 1.3 and earlier, affecting admin/adm_login.php via the admin_username parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands; CVSSv2 base score 7.5 (HIGH) with network access, low attack complexity,...

CVE-2008-0565

CVE-2008-0565 concerns a SQL injection in DeltaScripts PHP Links 1.3 and earlier, exploitable via the id parameter in vote.php. The vulnerability is documented with affected software and root cause: unsafely constructed SQL in vote.php allows remote SQL command execution. The available connected ...

CVE-2008-0566

CVE-2008-0566 describes a PHP remote file inclusion in DeltaScripts PHP Links 1.3 and earlier. The vulnerability exists in the file includes/smarty.php where an attacker can pass a URL to the parameter full_path_to_public_program , enabling remote code execution. Affected software is DeltaScripts...