CVE-2011-5145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Business Management OBM 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 seldomainid or 2 action parameter to obm.php; 3 tfuser parameter in a search action to group/groupindex.php; 4...

CVE-2006-3009: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Open Business Management OBM 1.0.3 pl1 allow remote attackers to inject arbitrary HTML or web script via the 1 tflang, 2 tfname, 3 tfuser, 4 tflastname, 5 tfcontact, 6 tfdatebefore, and 7 tfdateafter parameters to files such as a...