Vendor archive

orbitscripts CVEs

Beta · best-effort

4 CVEs tagged to vendor orbitscripts — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2014-2540

Published Apr 11, 2014

SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the site_directory_sort_field parameter…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-3152

Published Jul 11, 2008

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2006-2140

Published May 2, 2006

Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-3814

Published Nov 26, 2005

Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php,…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1