CVE-2009-2889

The vulnerability CVE-2009-2889 is a cross-site scripting (XSS) issue in index.php of PHP Scripts Now Hangman, exploitable via the letters parameter to inject arbitrary script/HTML. The CVSSv2 base score is 4.3 (Medium) with network attack vector and no confidentiality or availability impact; int...

CVE-2009-2888

The CVE-2009-2888 entry describes an SQL injection in index.php of PHP Scripts Now Hangman, exploitable via the n parameter to remotely execute arbitrary SQL commands. Affected component is the index.php handler for Hangman, with the underlying issue being user-supplied input in n that is not pro...