CVE-2006-5446

The CVE-2006-5446 entry applies to Casinosoft Casino Script (aka Masvet) 3.2, where a SQL injection vulnerability exists in lobby/config.php exploitable via the cfam parameter. The issue allows remote attackers to execute arbitrary SQL commands and is categorized with Media Trust considerations f...

CVE-2006-5457

Casinosoft Casino Script (Masvet) 3.2 contains multiple XSS vulnerabilities in its registration form, exploitable via the name or surname fields to inject arbitrary script/HTML. Remote exploitation is described; impact is limited to partial integrity and client-side exposure per the CVSS metrics ...