CVE-2006-3095

Multiple cross-site scripting XSS vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in 1 userlogin.cfm and 2 account.cfm...

CVE-2006-3096

Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 forum parameter in messagepost.cfm and 2 topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently...