CVE-2006-2128

CVE-2006-2128 affects Pro Publish 2.0. The provided sources describe multiple SQL injection vulnerabilities in the application, exploitable via specific request parameters to several pages: (1) admin/login.php with email/password, (2) search.php with find_str, (3) art.php with artid, and (4) cat....

CVE-2006-2129

CVE-2006-2129 describes a direct static code injection in Pro Publish 2.0. The flaw allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings stored in set_inc.php. Documents consistently identify the affected product as Pro Publish 2.0 and note that acc...

CVE-2006-2821

CVE-2006-2821 involves multiple cross‑site scripting (XSS) flaws in DeltaScripts Pro Publish. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) artid in art.php and (2) catname in cat.php. The cited sources describe XSS impact and ...