CVE-2008-6891

CVE-2008-6891 concerns multiple XSS flaws in ASP Forum Script. The affected component is the ASP Forum Script web application, with the vulnerabilities exploitable via user-supplied input: (1) the forum_id parameter to new_message.asp and to messages.asp, and (2) the query string to default.asp. ...

CVE-2008-6890

CVE-2008-6890 describes an SQL injection vulnerability in the ASP Forum Script’s messages.asp, exploitable via the message_id parameter. The affected component is the ASP Forum Script’s messaging functionality; the root cause is improper handling of user-supplied input in message_id, enabling an ...