CVE-2009-0829

CVE-2009-0829 involves multiple SQL injection vulnerabilities in QuoteBook. The flaws allow remote attackers to execute arbitrary SQL commands by supplying crafted input through the following parameters: (1) MyBox and (2) selectFavorites to quotes.php, and (3) QuoteName and (4) QuoteText to quote...

CVE-2009-0830

CVE-2009-0830 describes a cross-site scripting (XSS) vulnerability in QuoteBook that allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php. The root cause is unvalidated/unsanitized input in these fields, enabling script...