CVE-2008-7121

CVE-2008-7121 describes an XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier, where remote attackers can inject arbitrary web script or HTML through the search bar. The affected component is the SQL-PHP-based search functionality in the product, with exploitation relying on imprope...

CVE-2008-7120

CVE-2008-7120 : SQL injection in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL via the news.php parameter. The vulnerability is described as V2 CVSS base score 7.5 (HIGH) with network attack vector, low complexity, no authentication needed, and parti...