CVE-2008-6979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in asarchives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the resultsperpage parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might...

CVE-2008-6980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in asarchives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the resultsperpage parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-6981: Exposure of Sensitive Information to an Unauthorized Actor

index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid resultsperpage parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability...