CVE-2005-1633: Undefined Security Weakness

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4 tag parameter to...

CVE-2005-1634: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4...

CVE-2005-1479

CVE-2005-1479 affects JGS-Portal 3.0.1 and earlier. A SQL injection in jgs_portal.php via the id parameter allows remote attackers to execute arbitrary SQL commands. This impacts confidentiality, integrity, and availability (partial). Attack vector is network with low complexity and no authentica...

CVE-2005-1479: Undefined Security Weakness

SQL injection vulnerability in jgsportal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...