EUVD-2006-6332

Malware in sbrugna...

CVE-2006-6768

Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...

CVE-2006-6768

The CVE-2006-6768 entry documents multiple XSS vulnerabilities in the default.asp page of PWP Technologies The Classified Ad System, exploitable via the (1) cat and (2) main parameters. The underlying issue is cross-site scripting in input handling on that page, with a CVSS base score of 6.8 (Med...

CVE-2006-6349

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...

CVE-2006-6349

CVE-2006-6349 covers multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System. An attacker can remotely execute arbitrary SQL via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine. The NVD entry cites...

CVE-2006-6349

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...