CVE-2009-3598

The CVE-2009-3598 entry concerns a Cross-site scripting (XSS) vulnerability in survey_result.php of eCardMAX FormXP 2007. The flaw allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Documented impact is the ability to execute script in a victim’s browser for aff...

CVE-2009-3598

creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34871...

CVE-2008-3598

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6226...

CVE-2007-3598

The CVE-2007-3598 issue affects vtiger CRM up to version 5.0.2 (vendor states 5.0.3) where a manipulated DetailView record parameter in the Users module allows remote authenticated users to view all users’ names and e‑mail addresses and possibly alter user settings, exposing Partial confidentiali...

CVE-2006-3598

CVE-2006-3598 affects the PHP-Nuke Sections module. The vulnerability is a SQL injection in the viewarticle op via the artid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploitation avenues exist (e.g., Exploit-DB, SecurityFocus). CVSS metric...