CVE-2008-5337

CVE-2008-5337 is a SQL injection in Bandwebsite (Bandsite portal system) 1.5, via lyrics.php id parameter. The vulnerability arises from improper handling of the id input, allowing remote execution of arbitrary SQL commands. Impact is described as partial confidentiality/integrity/availability wi...

CVE-2008-5338

CVE-2008-5338 is an XSS vulnerability in Bandwebsite (Bandsite portal system) 1.5, exploitable via info.php by passing a crafted section parameter to inject arbitrary script/HTML. The affected component is info.php; root cause is reflected XSS in the section parameter. Reported impact per sources...