CVE-2008-6284

CVE-2008-6284 describes a SQL injection vulnerability in the J1Exchange/ Z1Exchange 1.0 product, specifically in the file edit.php where the site parameter can be exploited to execute arbitrary SQL commands. The issue enables remote attackers to interact with the database and potentially compromi...

CVE-2008-6392

CVE-2008-6392 describes an SQL injection vulnerability in the Z1Exchange component, specifically in showads.php, allowing remote attackers to execute arbitrary SQL commands via the id parameter . The vulnerability is characterized by the ability to manipulate the database through user-supplied in...

CVE-2008-6386

CVE-2008-6386 describes a Cross-site scripting (XSS) vulnerability in Z1Exchange 1.0, specifically in showads.php, where the id parameter can be leveraged to inject arbitrary web script or HTML. The NVD entry assigns a medium severity (CVSS v2 base score 4.3) with network attack vector, no confid...