Cross site scripting

Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...

CVE-2009-0248

Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...

Sql injection

SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter...

CVE-2008-5588

The CVE-2008-5588 entry documents an SQL injection in rankup.asp of Katy Whitton RankEm, exploitable via the siteID parameter. The underlying issue is improper handling/validation of siteID, enabling remote attackers to execute arbitrary SQL commands. Affected software: RankEm (rankup.asp). Impac...