EUVD-2007-3052

Malware in sbrugna...

PHPLive! 3.2.2 chat.php sid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24276/info PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the brows...

CVE-2009-4749

Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to 1 messagebox.php and 2 request.php...

Sql injection

SQL injection vulnerability in admin/traffic/knowledgesearchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expandquestion action...

CVE-2007-3218

CVE-2007-3218 is a cross-site scripting (XSS) vulnerability in PHP Live! before or at version 3.2.2, affecting the request.php component. The issue allows remote attackers to inject arbitrary web script or HTML via the pagex parameter. NVD lists a CVSS v2 base score of 4.3 (Medium) with high conf...