Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mr.Thief

#35706of 53,633
7.5Total CVSS
Vulnerabilities · 1
PT-2011-1974
7.5
2011-11-02
Scriptsfeed · Scriptsfeed Recipes Listing Portal · CVE-2010-5039
**Name of the Vulnerable Software and Affected Versions** ScriptsFeed Recipes Listing Portal version 1.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `loginid` parameter, also known as the UserName field, in the control/admin login.php file. **Recommendations** For ScriptsFeed Recipes Listing Portal version 1.0, consider restricting access to the control/admin login.php file to minimize the risk of exploitation. Avoid using the `loginid` parameter in the affected file until the issue is resolved.