CVE-2011-5039

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to login.php, 3 the filter parameter to widget.dokumentilista.php, and 4 the finnalogid parameter to nalozinaslov.php...

PT-2011-5186

Name of the Vulnerable Software and Affected Versions Infoproject Biznis Heroj affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username and password parameters to "login.php", the filter parameter to...

PT-2011-5187

Name of the Vulnerable Software and Affected Versions Infoproject Biznis Heroj affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can...