CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

Sql injection

Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 folder parameter to feed.php or 2 rssquery parameter to search.php...

CVE-2006-1042

CVE-2006-1042 affects Gregarius 0.5.2. The vulnerability is a SQL injection in the web UI, exploitable via the 1) folder parameter to feed.php or 2) rss_query parameter to search.php, enabling remote attackers to execute arbitrary SQL commands. The provided sources describe multiple SQL injection...