CVE-2009-2886

The CVE refers to a SQL injection vulnerability in the PHP Scripts Now product’s bios.php (President Bios) that allows remote attackers to execute arbitrary SQL commands through the rank parameter. Affected component: bios.php in the President Bios module. Root cause: improper input handling/unsa...

CVE-2009-2887: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

CVE-2009-2886: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter...