CVE-2009-2892

CVE-2009-2892 affects Scripteen Free Image Hosting Script 2.3, where header.php is vulnerable to SQL injection via the cookid or cookgid cookies. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no aut...

CVE-2008-3211

CVE-2008-3211 affects Scripteen Free Image Hosting Script 1.2 and 1.2.1. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1, enabling unauthorized admin actions. This is a cookie-based auth bypass, with no expl...

CVE-2008-3212

The CVE-2008-3212 entry concerns the Scripteen Free Image Hosting Script 1.2.1. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the following parameters: (1) username or (2) password to admin/login.php, and (3) uname or (4) pass ...

CVE-2009-4987

CVE-2009-4987 affects Scripteen Free Image Hosting Script 2.3. The issue allows remote unauthenticated users to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a flow noted as a different vector from CVE-2008-3211. The available documents do not spec...