CVE-2006-3309

CVE-2006-3309 concerns a SQL injection in the Scout Portal Toolkit (SPT) via the SPT--ForumTopics.php script’s forumid parameter. Affected product/version: Scout Portal Toolkit (SPT) ≤ 1.4.0. Root cause: insufficient input sanitization leading to SQL-related command execution. Impact: potential d...

CVE-2005-4195

CVE-2005-4195 describes multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) versions up to 1.3.1 (and note that vector 1 was reportedly present in 1.4.0). The affected entry lists five input points: (1) ParentId in SPT--BrowseResources.php, (2) ResourceId in SPT--FullRecord.php, ...