CVE-2005-4393

Cross-site scripting XSS vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 obcatid and 2 comid parameters...

CVE-2005-4392

CVE-2005-4392 describes an SQL injection in printer_friendly.cfm of e-publish CMS 2.0 and earlier, enabling remote users to execute arbitrary SQL via the id parameter. The vulnerability is documented across NVD/NVD-derived records with a CVSS v2 base score of 7.5 (HIGH). Affected product: e-publi...

CVE-2005-4393

CVE-2005-4393 describes a cross-site scripting (XSS) vulnerability in the show.cfm component of the e-publish CMS, version 2.0 and earlier. The underlying issue allows remote attackers to inject arbitrary web script or HTML by supplying the parameters (1) obcatid and (2) comid). Affected product:...