CVE-2008-1969: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary web script or HTML via the 1 LookUPId and 2 CbFun parameters to a CFLookUP.asp; 3 TitleParms, 4 WidgetsHeights, 5 WidgetsLinks, and 6 WidgetsTitles parameters to b...

CVE-2008-1968: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to 1 CFLookup.asp and 2 CznCommon/CznCustomContainer.asp...