CVE-2006-4529

CVE-2006-4529 describes an SQL injection vulnerability in the PHP page recherchemembre.php of membrepass 1.5. The flaw allows remote attackers to append or modify SQL commands through the recherche parameter, enabling possible unauthorized data access or modification. The available sources identi...

CVE-2006-4530

CVE-2006-4530 describes a direct static code injection vulnerability in the PHP-based product membrepass 1.5. The flaw occurs in include/change.php where the parameter aifon is injected into include/variable.php , enabling an attacker to execute arbitrary PHP code. The canonical affected componen...

CVE-2006-4528

Multiple cross-site scripting (XSS) vulnerabilities affect membrepass 1.5, allowing remote attackers to inject arbitrary script or HTML via the (1) recherche parameter in recherchermembre.php and the (2) email parameter in test.php. The NVD entry confirms these XSS flaws and lists CVE-2006-4528 a...