CVE-2010-2617

Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...

CVE-2010-2617

The CVE-2010-2617 entry concerns PHP Bible Search’s bible.php. The affected component is the bible.php script; the vulnerability is an XSS flaw exploitable via the chapter parameter, enabling remote script/HTML injection. OpenVAS adds a related SQL injection/XSS note for PHP Bible Search, but the...

CVE-2010-2616

CVE-2010-2616 : PHP Bible Search (bible.php) is vulnerable to SQL injection via the chapter parameter, affecting the PHP Bible Search project (around version 0.99). The OpenVAS entry explicitly notes SQL injection (and also mentions cross-site scripting in its description). The root cause is unsa...

CVE-2010-2616: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter...

CVE-2010-2617: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...