Vendorsscripteenfree_image_hosting_script1.2.1
Vulnerabilities

scripteen Free Image Hosting Script 1.2.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-3211
Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.
Published 2008-07-18 · Modified
7.51 PoCEPSS 0.033
CVE-2008-3212
Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2008-07-18 · Modified
7.51 PoCEPSS 0.010