SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. NOTE: linking.page.php is commonly renamed to link.php, links.php, etc.
Search vulnerabilities
CVE-2008-2263
CVSS 2.0 · 7.5 High
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2008-2277
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter.
CVSS 2.0 · 7.5 High
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2009-1854
Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1.
CVSS 2.0 · 7.5 High
EPSS 2.4%
KEV · Not listed
Vendors
Products
CVE-2009-4206
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS 2.0 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.