CVE-2009-2885

CVE-2009-2885 describes an SQL injection in bios.php of PHP Scripts Now World’s Tallest Buildings, exploitable via the rank parameter to allow remote command execution against the database. The vulnerability is caused by unsanitized input incorporated into SQL queries. Documented impact is partia...

CVE-2009-2884

CVE-2009-2884 describes an XSS flaw in bios.php of PHP Scripts Now World's Tallest Buildings. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the rank parameter. Affects bios.php in the cited package (no vendor/product version details provided). Th...