CVE-2006-6709

CVE-2006-6709 affects MGinternet Property Site Manager. The NVD description identifies multiple SQL injection vulnerabilities in this product, exploitable via input parameters: (1) p to detail.asp; (2) l, (3) typ, (4) loc to listings.asp; and (5) Password or (6) Username to admin_login.asp. Root ...

CVE-2006-6708

CVE-2006-6708 describes a cross-site scripting (XSS) vulnerability in MGinternet Property Site Manager, specifically in the listings.asp handler. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the s parameter. The available documents do not provid...