Authentication flaw

VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...

Cross site scripting

Cross-site scripting XSS vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment...

CVE-2006-1553

VSNS Lemon 3.2.0 is affected by CVE-2006-1553 due to an SQL injection in functions/final_functions.php when magic_quotes_gpc is disabled. The vulnerable parameter is id, enabling remote attackers to inject arbitrary SQL commands. This is a server-side input validation flaw in the PHP code path ha...

CVE-2006-1554

Cross-site scripting XSS vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment...

CVE-2006-1553

SQL injection vulnerability in functions/finalfunctions.php in VSNS Lemon 3.2.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...