5 matches found
CVE-2009-2772
Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to 1 quicksearch.php and 2 viewprofile.php...
CVE-2009-2772
The CVE-2009-2772 entry describes multiple cross-site scripting (XSS) vulnerabilities in the PG Roommate Finder Solution. The flaw allows remote attackers to inject arbitrary web script or HTML through the part parameter to two PHP scripts: quick_search.php and viewprofile.php. The NVD metrics sh...
Sql injection
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-5307
CVE-2008-5307: A SQL injection vulnerability exists in admin/index.php of the PG Roommate Finder Solution, exploitable via the login_lg parameter. The flaw enables remote attackers to execute arbitrary SQL commands. The NVD entry notes this as a high-severity issue (CVSSv2 base score 7.5; AV:N/AC...