CVE-2012-3805

Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...

CVE-2006-1534

Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via 1 the useremail parameter in a lostpass.php, and the 2 useremail and 3 userusername parameters in b sub.php and c unsub.php...

Sql injection

Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via 1 the useremail parameter in a lostpass.php, and the 2 useremail and 3 userusername parameters in b sub.php and c unsub.php...