CVE-2005-1011

CVE-2005-1011 affects SiteEnable’s content.asp script where the sortby parameter is not properly sanitized, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is documented in multiple sources (NVD entry with CVSSv2 base score 7.5 HIGH, remote network access, no authent...

CVE-2005-1012

CVE-2005-1012 is an XSS vulnerability in Iatek SiteEnable. The issue allows remote attackers to inject arbitrary web script or HTML through (1) contenttype in content.asp, (2) the title, or (3) the description. The NVD entry confirms the affected component as SiteEnable and the impact is reflecte...