6 matches found
CVE-2010-2617
Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...
CVE-2010-2617
The CVE-2010-2617 entry concerns PHP Bible Search’s bible.php. The affected component is the bible.php script; the vulnerability is an XSS flaw exploitable via the chapter parameter, enabling remote script/HTML injection. OpenVAS adds a related SQL injection/XSS note for PHP Bible Search, but the...
CVE-2010-2616: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter...
CVE-2010-2617: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...
CVE-2007-4975
The cited CVE-2007-4975 describes a Cross-site Scripting (XSS) vulnerability in hilfe.php of b1gMail 6.3.1, where an attacker can inject arbitrary script/HTML via the chapter parameter. Affected product appears to be b1gMail 6.3.1, with the vulnerable component/function being hilfe.php. The publi...
CVE-2007-4975: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...