6rbscript

Vendor: 6rbscript • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6454 16rbscript 16rbscript Apr 23, 2026 Mar 13, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action.
CVE-2008-6453 16rbscript 16rbscript Apr 23, 2026 Mar 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
CVE-2008-4344 16rbscript 16rbscript Apr 23, 2026 Sep 30, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter.