Sql injection

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...

CVE-2014-9434

CVE-2014-9434 describes a cross-site scripting (XSS) vulnerability in the Absolut Engine 1.73 administrative backend, specifically in the file path admin/managerrelated.php. The issue allows remote authenticated users to inject arbitrary web script or HTML through the title parameter. The connect...

CVE-2014-9434: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter...