Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2006-7086 1 Mrcgiguy 1 Hot Links 2025-04-09 N/A
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
CVE-2008-7121 1 Mrcgiguy 1 Hot Links Sql-php 2025-04-09 N/A
Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar.
CVE-2008-7120 1 Mrcgiguy 1 Hot Links Sql-php 2025-04-09 N/A
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter.