CVE-2008-3394

CVE-2008-3394 : In BookMine, multiple cross-site scripting (XSS) vulnerabilities exist in the web app’s search.cfm. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters. Root cause: insufficient input validation/sanitization...

CVE-2008-3393

The CVE-2008-3393 entry describes an SQL injection in BookMine’s events.cfm, exploitable via the events_id parameter, potentially allowing remote execution of arbitrary SQL commands. Documents confirm the vulnerability’s existence and affected component but do not specify vendor versions, impacte...