CVE-2008-6312

ProQuiz 1.0 is affected by an SQL injection in index.php. The CVE-2008-6312 vector is via the username parameter, caused by insufficient input sanitization. OpenVAS also documents a related vector (password parameter) for CVE-2008-6327. Both entries indicate remote code execution potential throug...

CVE-2008-6327

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

CVE-2008-6312

creationtimestamp| type| source ---|---|--- 2008-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7397...

CVE-2008-7097

creationtimestamp| type| source ---|---|--- 2008-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6312...

CVE-2008-7098

creationtimestamp| type| source ---|---|--- 2008-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6312...

CVE-2007-6312

CVE-2007-6312 is an XSS vulnerability in the login page of Websense’s Web Reporting Tools portal (Websense Enterprise/Web Security Suite 6.3). The issue arises because the username field is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via that input. Affect...