3 matches found
CVE-2005-4057
CVE-2005-4057 describes a Cross-site scripting (XSS) vulnerability in the PluggedOut Nexus 0.1 project, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the (1) Location, (2) Last Name, and (3) First Name parameters. The entries ...
CVE-2005-4056
CVE-2005-4056 describes a SQL injection vulnerability in the search.php component of PluggedOut Nexus 0.1. The flaw allows remote attackers to manipulate the database by injecting SQL through the Location, Last Name, and First Name parameters. The vulnerability is documented with a high impact po...
CVE-2006-1081
CVE-2006-1081 affects PluggedOut Nexus 0.1 by Jonathan Beckett. The vulnerability is a SQL injection in forgotten_password.php triggered via the email parameter, enabling remote attackers to execute arbitrary SQL commands. The available connected sources confirm the affected component and root ca...