CVE-2006-1899

CVE-2006-1899 affects dev Neuron Blog 1.1 and earlier, with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters. The issue stems from insufficient input sanitization in these fields, ena...

CVE-2006-6993

CVE-2006-6993 concerns multiple SQL injection flaws in Neuron Blog 1.1, specifically in pages/addcomment2.php. The vulnerabilities allow remote attackers to inject arbitrary SQL via the (1) commentname, (2) commentmail, (3) commentwebsite, or (4) comment parameters, leading to potential data inte...