CVE-2012-4744

CVE-2012-4744 describes a Cross-site scripting (XSS) vulnerability in ssearch.php of the Siche search module 0.5 for Zeroboard. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with n...

CVE-2012-4743

The CVE-2012-4743 entry describes multiple SQL injection vulnerabilities in the Siche search module (Siche search module 0.5) for Zeroboard, exploitable via the parameters (ss, sm, align, category) in ssearch.php. The underlying issue is insecure handling of input in ssearch.php that allows remot...