CVE-2009-3162

The CVE-2009-3162 entry describes a Cross-site Scripting (XSS) vulnerability in Multi Website 1.5, exploitable through the search parameter in a search action to the default URI. The issue allows remote attackers to inject arbitrary web script or HTML into users’ browsers. Affected product: Multi...

CVE-2009-3150

CVE-2009-3150 : In Multi Website 1.5, the vulnerability exists in the file index.php where the parameter Browse in a vote action is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This is the core issue and attack vector described in the linked CVE record...