CVE-2006-6021

CVE-2006-6021 describes a SQL injection in the login component of BestWebApp Dating Site, exploitable via the username and passwd parameters, allowing remote arbitrary SQL commands. The CVE entry indicates a network attack vector with no authentication, and partial impacts to confidentiality, int...

CVE-2006-6022

The CVE-2006-6022 entry documents a Cross-site Scripting (XSS) flaw in BestWebApp Dating Site, specifically in login_form.asp where an attacker can inject arbitrary script via the msg parameter. The vulnerability’s described impact is partial confidentiality/integrity/availability, with network a...