CVE-2005-3817

CVE-2005-3817 refers to multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier. The flaws allow remote SQL commands via (1) cid in search_result.php, (2) sbres_id in review.php, (3) cid in browsecats.php, (4) h_id in email.php, and (5) an unspecified parameter...

CVE-2008-2087

The CVE-2008-2087 vulnerability affects Softbiz Web Host Directory Script, specifically in search_result.php. When magic_quotes_gpc is disabled, the host_id parameter can be exploited to inject SQL commands, enabling remote execution of arbitrary SQL. The description does not provide details on a...