CVE-2006-3851

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...

CVE-2006-3851

The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...

CVE-2005-3851

CVE-2005-3851 is a cross-site scripting (XSS) vulnerability affecting Online Attendance System (OASYS) Lite 1.0. The flaw resides in search.asp where attacker-controlled search parameters (possibly the keyword parameter) can trigger script/HTML injection in the victim’s browser. The issue is docu...