CVE-2014-8593

Allomani Weblinks 1.0 has multiple XSS vulnerabilities described in CVE-2014-8593, allowing remote attackers to inject arbitrary web script or HTML via (1) the default URI to admin.php, (2) the id parameter to admin.php, or (3) go.php. The NVD entry lists these via the vulnerability description; ...

CVE-2014-8766

CVE-2014-8766 involves multiple SQL injection vulnerabilities in Allomani Weblinks 1.0. The affected component is the Weblinks application (index.php browse action and admin.php) where attacker-supplied input in the cat parameter (in browse) or other unspecified parameters (in admin) can lead to ...