CVE-2006-1004

Parodia 6.2 and earlier contains a cross-site scripting (XSS) vulnerability in agencyprofile.asp exploitable via the AG_ID parameter. Remote attackers could inject arbitrary web script/HTML. The affected software version is Parodia 6.2 and earlier; the provided documents do not specify the root c...

CVE-2006-1005

CVE-2006-1005 affects Parodia 6.2 and earlier. The issue is an information disclosure: remote attackers can cause an SQL error by supplying an invalid AG_ID parameter in agencyprofile.asp, which may reveal sensitive information. The vulnerability is described consistently across NVD/Red Hat/NVD m...

CVE-2007-2818

The CVE-2007-2818 entry describes a Cross-site Scripting (XSS) vulnerability in cand_login.asp of CactuSoft Parodia 6.4 and older. The issue allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter. The available documents confirm the affected component and vulne...