CVE-2005-4196: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the ss parameter in SPT--QuickSearch.php; 2 ParentId parameter in SPT--BrowseResources.php; 3 the ResourceId parameter in...

CVE-2005-4195: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the ParentId parameter in SPT--BrowseResources.php, 2 ResourceId parameter in SPT--FullRecord.php, 3 ResourceOffset parameter in SPT--Home.php, and 4...