CVE-2007-4835

The CVE-2007-4835 entry describes an SQL injection in phpMyQuote 0.20, exploitable via the id parameter in an edit action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as indicated by the description and multiple sources (NVD entry). The root cause is ...

CVE-2007-4836

CVE-2007-4836 describes a Cross-site Scripting (XSS) vulnerability in phpMyQuote 0.20, exposed via index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the id parameter in an edit action. The connected documents confirm the affected software and the vulnerab...

PHPMyQuote 0.20 - index.php SQL Injection Cross-Site Scripting

PHPMyQuote 0.20 - index.php SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/25615/info phpMyQuote is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an SQL-injection issue, because the application fails to sanitize...