← Back

2daybiz

25 CVEs • 13 products

Products (13)

Click to collapse
Toggle
Custom T Shirt Design Script
custom_t-shirt_design_script
4 CVEs
Video Community Portal Script
video_community_portal_script
4 CVEs
Polls Script
polls_script
3 CVEs
Business Community Script
business_community_script
2 CVEs
Web Template Software
web_template_software
2 CVEs
Multi Level Marketing Software
multi_level_marketing_software
2 CVEs
Online Classified Script
online_classified_script
2 CVEs
Template Monster Clone
template_monster_clone
1 CVE
Auction Script
auction_script
1 CVE
Matrimonial Script
matrimonial_script
1 CVE
Job Search Engine Script
job_search_engine_script
1 CVE
Job Site Script
job_site_script
1 CVE
Network Community Script
network_community_script
1 CVE

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-1820
12daybiz
1Custom T Shirt Design Script
Apr 23, 2026
May 29, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVE-2009-1819
12daybiz
1Custom T Shirt Design Script
Apr 23, 2026
May 29, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2009-1767
12daybiz
1Template Monster Clone
Apr 23, 2026
May 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstnam...Show more
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.Show less
CVE-2009-1652
12daybiz
1Business Community Script
Apr 23, 2026
May 16, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.
CVE-2009-1651
12daybiz
1Business Community Script
Apr 23, 2026
May 16, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.