CVE-2006-2618

The CVE-2006-2618 entry describes a cross-site scripting (XSS) vulnerability in AlstraSoft Web Host Directory 1.2 and HyperStop WebHost Directory 1.2, exploitable via the "+write a review" box. The flaw allows remote attackers to inject arbitrary web script or HTML, with the issue arising because...

CVE-2005-3817

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...

CVE-2005-3817

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...

CVE-2005-3817

CVE-2005-3817 refers to multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier. The flaws allow remote SQL commands via (1) cid in search_result.php, (2) sbres_id in review.php, (3) cid in browsecats.php, (4) h_id in email.php, and (5) an unspecified parameter...

Softbiz Web Host Directory Script Multiple vuln.

Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...