CVE-2006-2801: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ua or 2 us parameters...

CVE-2006-2800: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ua or 2 us parameters. NOTE: this might be resultant from SQL injection...