CVE-2026-38935: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in diskover-community = 2.3.5 in public/view.php via the doctype parameter...

CVE-2009-4805: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...