CVE-2010-2014: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cp/listcontent.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter...

CVE-2005-3914: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via 1 the cl parameter to SubCategory.php and the itemid parameter in 2 ItemInfo.php and 3 ItemReview.php...