CVE-2008-5933

The CVE-2008-5933 entry documents multiple cross-site scripting (XSS) flaws in CMS ISWEB 3.0, specifically in index.php where the strcerca and id_oggetto parameters can be used to inject arbitrary web script or HTML. The vulnerability arises from unsafely handling these inputs, enabling an attack...

CVE-2008-5934

CVE-2008-5934 describes a SQL injection vulnerability in the CMS ISWEB 3.0, specifically in the file index.php, where the parameter id_sezione can be manipulated to cause arbitrary SQL commands to be executed by an attacker. The vulnerability is exploitable remotely and can affect the confidentia...