VYPR

Living Local

by Ezonescripts

CVEs (3)

  • CVE-2008-6530Mar 26, 2009
    risk 0.03cvss epss 0.04

    Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file.

  • CVE-2008-6529Mar 26, 2009
    risk 0.03cvss epss 0.04

    Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter.

  • CVE-2008-3943Sep 5, 2008
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter.