CVE-2008-3772: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categoriesportal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3771: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via the PageNo parameter...