CVE-2006-3614

CVE-2006-3614 affects OrbitMATRIX 1.0 (Orbitcoders). The vulnerability is described as a possible SQL injection exposing a vulnerability where the page_name parameter can trigger a SQL error, indicating a flaw in input handling within the affected component. The NVD entry lists a network attack v...

CVE-2006-3610

CVE-2006-3610 affects Orbitcoders OrbitMATRIX 1.0 (index.php) where a modified page_name parameter can disclose portions of the SQL query, yielding a partial database schema. The vulnerability is described as an information disclosure that may be target-specific, with no explicit exploitation det...

CVE-2006-3609

CVE-2006-3609 describes a cross-site scripting (XSS) vulnerability in Orbitcoders OrbitMATRIX 1.0, specifically in index.php where the page_name parameter can be exploited to inject arbitrary script/HTML via an IMG tag whose SRC contains a javascript: URI. Affected component is OrbitMATRIX 1.0’s ...