CVE-2008-5976

CVE-2008-5976 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the PHP JOBWEBSITE PRO package, specifically in the file siteadmin/forgot.php. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via two inputs: (1) the adname parameter in a Submit act...

CVE-2008-5977

CVE-2008-5977 affects PHP JOBWEBSITE PRO (siteadmin/forgot.php) where the adname parameter in a Submit action is vulnerable to SQL injection. The underlying issue is an improper handling of user-supplied input, enabling remote attackers to potentially execute arbitrary SQL commands. The vulnerabi...