cbcvebase.

Scriptsfrenzy E-Uploader Pro vulnerabilities

1 known vulnerability affecting scriptsfrenzy/e-uploader_pro.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2008-5075P3MEDIUMCVSS 6.8PoCv1.02008-11-14
CVE-2008-5075 [MEDIUM] CWE-89 CVE-2008-5075: Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_g Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php.
nvd
Scriptsfrenzy E-Uploader Pro vulnerabilities | cvebase