Jogjacamp JProfile Gold - id_news SQL Injection

Jogjacamp JProfile Gold - idnews SQL Injection || | | | \ / \ / \ / \ / / / | | | / | / \ | | /\ /\ / /| |/| / \ \ | \ // | || / / / Jogjacamp JProfile Gold SQL Injection by kecemplungkalen Vendor : http://jogjacamp.com bugs : /index.php?action=news.detail&idnews= exploit : union...

CVE-2006-6747: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2006-6746

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-6746: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...