CVE-2007-0794

CVE-2007-0794 describes a SQL injection vulnerability in GlobalMegaCorp dvddb 0.6, specifically in inc/common.php via the user parameter, potentially allowing remote arbitrary SQL execution. Some sources note the issue is disputed and that the file may contain only function definitions. Connected...

CVE-2007-0793

CVE-2007-0793 describes a PHP remote file inclusion vulnerability in inc/common.php of GlobalMegaCorp dvddb 0.6, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the config parameter. The affected component is the dvddb app’s common.php handling of config paths; root ...

CVE-2007-2499

CVE-2007-2499 covers multiple XSS flaws in DVDdb 0.6 and earlier. The vulnerabilities allow remote attackers to inject arbitrary script/HTML through (1) the movieid parameter in loan.php and (2) the s parameter in listmovies.php. The NVD entry provides a base score of 6.8 (MEDIUM) with NETWORK at...