CVE-2008-3394

CVE-2008-3394 : In BookMine, multiple cross-site scripting (XSS) vulnerabilities exist in the web app’s search.cfm. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters. Root cause: insufficient input validation/sanitization...

CVE-2007-3394

Summary (CVE-2007-3394): Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL via (1) the artid parameter to mod.php in a viewarticle action (publisher mod) and (2) the bid parameter to banners.php in a click action. The mod.php viewdisk and view...

CVE-2006-3394

The CVE-2006-3394 entry concerns BXCP 0.3.0.4 with an SQL injection in the file set (mod in index.php), exploitable via the where parameter in a view action. The underlying issue is an unsanitized or improperly handled input leading to arbitrary SQL execution. The provided sources (NVD, CVE list,...

CVE-2005-3394

/* CVE-2005-3394 */ Summary: Multiple SQL injection vulnerabilities affect the oaboard forum 1.0 in the file/forum logic (forum.php). The two vulnerable parameters are the (1) channel parameter in the topics module and (2) the topic parameter in the posting module. What is affected: oaboard forum...