CVE-2008-6980

The CVE-2008-6980 entry describes a SQL injection in as_archives.php of phpAdultSite CMS (likely version 2.3.2). The vulnerability enables remote attackers to manipulate the database via the results_per_page parameter to index.php. Per the NVD entry, the issue has a CVSS v2 base score of 7.5 (HIG...

CVE-2008-6979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in asarchives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the resultsperpage parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might...

CVE-2008-6980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in asarchives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the resultsperpage parameter to index.php. NOTE: some of these details are obtained from third party information...