CVE-2008-5888

CVE-2008-5888 describes multiple SQL injection vulns in Click&Rank. The vulnerabilities allow remote attackers to execute arbitrary SQL via the id parameter to hitcounter.asp, user_delete.asp, and user_update.asp, and via the userid and PassWord parameters to admin_login.asp (USERNAME and PASSWOR...

CVE-2008-5889

The CVE-2008-5889 entry describes a Cross-site scripting (XSS) vulnerability in Click&Rank’s user.asp, exploitable via the action parameter. The vulnerability is reflected/script-injected through user input, with a CVSSv2 base score of 4.3 (Medium) and no authentication required, according to NVD...