CVE-2008-4517

CVE-2008-4517 describes a SQL injection in leggi.php of geccBBlite 2.0 that allows remote attackers to execute arbitrary SQL commands via the id parameter. The vulnerability is evidenced across multiple sources (NVD, CVE lists, PRION) with consistent description. Exploitation status, affected ver...

CVE-2009-4649

GeccBBlite 0.1 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the postatoda parameter to rispondi.php and scrivi.php, with improper handling in forum.php. The NVD/NVD-derived entry lists a CVSS v2 ba...