Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664

Multiple Cross Site Scripting XSS and SQL injection Vulnerabilities in XRMS, CVE-2008-3664 References https://vulners.com/cve/CVE-2008-3664 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3664 http://xrms.sourceforge.net Description XRMS is a web-based application for managing business entities such...

CVE-2008-3664

XRMS is affected by multiple XSS vulnerabilities (CVE-2008-3664) in its web interface. The issues allow remote attackers to inject arbitrary script/HTML via numerous inputs, including the real name field (user list), login.php target, activities/some.php title, and several other parameters (compa...

xrms-sqlxss.txt

Multiple Cross Site Scripting XSS and SQL injection Vulnerabilities in XRMS, CVE-2008-3664 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3664 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3664 http://xrms.sourceforge.net Description XRMS is a web-based application for managing...