CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...

CVE-2006-1773

SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php...

Sql injection

SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php...

CVE-2006-1773

SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php...