Vendorsscripteenfree_image_hosting_scriptall versions
Vulnerabilities

scripteen Free Image Hosting Script

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2009-4987
admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211.
Published 2010-08-25 · Modified
7.51 PoCEPSS 0.064
CVE-2008-3211
Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.
Published 2008-07-18 · Modified
7.51 PoCEPSS 0.033
CVE-2009-2892
Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a (1) cookid or (2) cookgid cookie.
Published 2009-08-20 · Modified
7.51 PoCEPSS 0.011
CVE-2008-3212
Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2008-07-18 · Modified
7.51 PoCEPSS 0.010