CVE-2007-0484

The CVE-2007-0484 entry describes multiple SQL injection vulnerabilities in Enthusiast 3.1. The issue arises in the server-side handling of the cat parameter for show_owned.php, show_joined.php, and possibly other files, enabling remote attackers to execute arbitrary SQL commands. The provided do...

CVE-2007-0483: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Enthusiast 3.1 allow remote attackers to inject arbitrary web script or HTML via the URI for 1 showowned.php or 2 showjoined.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0484: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enthusiast 3.1 allow remote attackers to execute arbitrary SQL commands via the cat parameter to 1 showowned.php, 2 showjoined.php, and possibly other files. NOTE: The provenance of this information is unknown; the details are obtained solely from third...