Search vulnerabilities

Results 3

Export CSV
CVE-2006-7086

The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.

CVSS 2.0 · 4.3 Medium EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2008-7120

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2008-7121

Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors