VYPR

by 6rbscript

CVEs (3)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2008-64540.030.00Mar 13, 2009SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action.
CVE-2008-64530.030.04Mar 13, 2009Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
CVE-2008-43440.030.00Sep 30, 2008SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter.