Vendors1scriptsz1exchange1.0
Vulnerabilities

1scripts z1exchange 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2008-6284
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter.
Published 2009-02-25 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6392
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published 2009-03-02 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6386
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Published 2009-03-02 · Modified
4.31 PoCEPSS 0.015