CVE-2008-1476

Serendipity (S9Y) up to version 1.2.x is vulnerable to cross-site scripting via received trackbacks. Root cause: insufficient input sanitisation in several scripts. Impact: remote attackers can inject arbitrary script/HTML. Mitigation: upgrade to Serendipity 1.3 or later (per Debian DSAs and rela...

phpBB Blog 2.2.2 SQL inj. vuln.

phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...