) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Keyword (text search): cpe:2.3:a:i-escorts:i-escorts_directory_script:-:*:*:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2009-4865 |
Multiple SQL injection vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) search_name and (2) languages parameters. NOTE: some of these details are obtained from third party information. Published: May 11, 2010; 8:02:09 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2009-4864 |
Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the (1) search_name and (2) languages parameters. NOTE: some of these details are obtained from third party information. Published: May 11, 2010; 8:02:09 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2009-4574 |
SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the country_id parameter. Published: January 06, 2010; 5:00:07 PM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |