CVE-2006-6075

The CVE-2006-6075 entry describes a cross-site scripting (XSS) vulnerability in BaalAsp forum, specifically in addpost1.asp via the name parameter. The underlying issue is insufficient input handling that allows remote attackers to inject arbitrary script/HTML. CVSS v2 base score is 6.8 (Medium) ...

CVE-2006-6090

CVE-2006-6090 documents multiple SQL injection vulnerabilities in the BaalAsp forum that allow remote attackers to execute arbitrary SQL commands via (1) the password parameter to adminlogin.asp, (2) the name or password parameter to userlogin.asp, or (3) the search parameter to search.asp. The N...