Search vulnerabilities

Results 3

Export CSV
CVE-2007-0339

SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter). NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2006-0661

Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
CVE-2006-0856

SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the Username parameter.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products