CVE-2008-4056

CVE-2008-4056 describes a Cross-site scripting (XSS) vulnerability in the admin/login.php of Matterdaddy Market 1.1 . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Multiple connected sources corroborate the description. The NVD entry lists a CVSSv...

CVE-2008-3783

Matterdaddy Market 1.1 contains multiple SQL injection vulnerabilities in index.php when magic_quotes_gpc is disabled. The flaws allow remote attackers to influence the (1) category and (2) type parameters to execute arbitrary SQL commands. Affected component is index.php within Matterdaddy Marke...