Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)

...

CVE-2006-3039

CVE-2006-3039: A Cross-site Scripting (XSS) vulnerability in Cescripts Realty Home Rent, exploitable via the sel_menu parameter in index.php. The issue allows remote attackers to inject arbitrary script/HTML. The vendor stated on 2006-08-23 that “All issues concerning this script and others at ce...

CVE-2005-3039

CVE-2005-3039 describes an SQL injection in Mall23 eCommerce where the infopage.asp script processes the idPage parameter, enabling remote arbitrary SQL execution. The issue arises from improper handling of user-supplied input in the SQL query, consistent with the CVSS data indicating network acc...