EUVD-2004-2558

Malware in sbrugna...

CVE-2004-2568

CVE-2004-2568 concerns multiple cross-site scripting (XSS) flaws in ReciPants 1.1.1. The issue arises from insufficient input sanitization in fields such as user id, recipe id, category id and other ID numbers, enabling remote script/HTML injection. The connected Red Hat and CVE records confirm t...

CVE-2004-2567

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 user id, 2 recipe id, 3 category id, and 4 other ID number fields...