CVE-2010-5039

CVE-2010-5039 affects ScriptsFeed Recipes Listing Portal 1.0, via control/admin_login.php, where the loginid parameter (UserName field) can be used to perform SQL injection. Root cause: improper input handling that allows arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL c...

CVE-2008-6943

CVE-2008-6943 describes an Unrestricted file upload vulnerability in the ScriptsFeed Recipes Listing Portal. Remote authenticated users can upload a file with an executable extension as a recipe photo, then access it directly via a URL under pictures/ to execute arbitrary code. The NVD entry prov...