CVE-2006-7034

CVE-2006-7034 corresponds to an SQL injection in the Super Link Exchange Script 1.0, specifically via the cat parameter in directory.php. The underlying flaw is unsanitized user input in the SQL query construction, enabling remote attackers to execute arbitrary SQL commands. The CVSS v2 base scor...

CVE-2006-7035

The CVE concerns a directory traversal in the Make_thumbnail.php script of the Super Link Exchange Script 1.0. The vulnerability arises from unsafely handling the imgpath parameter, allowing remote attackers to traverse directories (“..” sequences) and read arbitrary files. Affected software: Sup...

CVE-2006-7033

The CVE-2006-7033 entry describes a Cross-site Scripting (XSS) vulnerability in Super Link Exchange Script 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through IMG tags in the search box. This affects the vulnerable component (the search input handling in Super Lin...