CVE-2005-0292

PHP Gift Registry (phpGiftReg) 1.4.0 (and possibly earlier versions before 1.5.0b1) contains multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to inject SQL via the parameters messageid, shopper, shopfor, or itemid, potentially enabling arbitrary SQL command e...

CVE-2004-2484

PHP Gift Registry 1.3.5 and earlier contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the message parameter to event.php or index.php. The description indicates the vulnerability is triggered through user-supplied input in t...