124 matches found
CVE-2007-3516
The CVE-2007-3516 entry describes multiple cross-site scripting (XSS) flaws in kayit.asp of Gorki Online Santrac Sitesi, exploitable via user-supplied inputs in uyeler.asp: the (1) kullanici, (2) posta, and (3) takim_adi parameters. The underlying issue is input handling without proper sanitizati...
CVE-2006-3516
CVE-2006-3516 describes multiple SQL injection vulnerabilities in FreeHost that allow remote attackers to execute arbitrary SQL commands via two parameters: (1) readme in FreeHost/misc.php and (2) index in FreeHost/news.php. The affected software is FreeHost; the underlying issue is improper hand...
CVE-2005-3516
CVE-2005-3516 is a cross-site scripting (XSS) vulnerability in Chipmunk Directory Script, specifically in the file recommend.php where the entryID parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The connected PT-2005-4312 advisory corroborates this descripti...