Skip to content

Scripts-For-Sites · weakness class

SQL Injection

18 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

  1. SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.CVE-2008-4754Scripts-For-Sites · 3.1% likely

    CWE-89

  2. SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a li…CVE-2008-6781Scripts-For-Sites · 1.2% likely

    CWE-89

  3. SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter.CVE-2008-6867Scripts For Sites · 1.0% likely

    CWE-89

  4. SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2008-6243Scripts For Sites · 1.0% likely

    CWE-89

  5. SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a…CVE-2008-6784Scripts-For-Sites · 1.0% likely

    CWE-89

  6. SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id paramet…CVE-2008-6783Scripts-For-Sites · 1.0% likely

    CWE-89

  7. SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in…CVE-2008-6782Scripts-For-Sites · 1.0% likely

    CWE-89

  8. SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter.CVE-2008-6778Scripts-For-Sites · 1.0% likely

    CWE-89

  9. SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action.CVE-2008-3719Scripts-For-Sites · 1.0% likely

    CWE-89

  10. SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a li…CVE-2008-6780Scripts-For-Sites · 1.0% likely

    CWE-89

  11. SQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-6244Scripts-For-Sites · 1.0% likely

    CWE-89

  12. SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parame…CVE-2008-6237Scripts-For-Sites · 1.0% likely

    CWE-89

  13. SQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter.CVE-2008-6242Scripts-For-Sites · 1.0% likely

    CWE-89

  14. SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter.CVE-2008-6776Scripts-For-Sites · 1.0% likely

    CWE-89

  15. SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter.CVE-2008-6247Scripts-For-Sites · 1.0% likely

    CWE-89

  16. SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter.CVE-2008-6246Scripts-For-Sites · 1.0% likely

    CWE-89

  17. SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list…CVE-2008-6808Scripts-For-Sites · 1.0% likely

    CWE-89

  18. SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-6245Scripts-For-Sites · 1.0% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.