Scripts For Sites develops a portfolio of web-based business and entertainment applications including auction, e-commerce, gaming, and directory hosting platforms. The vendor's vulnerability exposure is characterized by a singular, recurrent weakness class: SQL injection across its product line, reflecting common input-validation shortcomings in web application codebases. The applications span multiple business verticals and remain embedded in small-to-medium web properties, and the injection vulnerabilities represent a durable architectural pattern rather than isolated incidents. Public exploit code has a moderate tendency to accompany disclosures in this weakness class. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Scripts For Sites over time
Signals from CVEs in this vendor scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-6867HIGH SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter. | Jul 14, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6808HIGH SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list a | May 12, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6784HIGH SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a l | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6783HIGH SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id paramete | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6782HIGH SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6781HIGH SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a lis | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6780HIGH SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a lis | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6778HIGH SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter. | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6776HIGH SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter. | May 1, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6247HIGH SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter. | Feb 23, 2009 | 7.5 | 28 | NO | YES |
Signals from CVEs in this vendor scope (20 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Scripts For Sites.
Media articles that mention a CVE ID that affects a product developed by Scripts For Sites — matched by CVE ID, not by vendor name.