CVE-2009-1952

CVE-2009-1952 concerns multiple SQL injection vulnerabilities in the administrative login feature of PropertyMax Pro FREE 0.3. The root cause is improper handling of user-supplied inputs in the login process when magic_quotes_gpc is disabled, enabling remote attackers to craft (username, password...

CVE-2009-1951

The CVE-2009-1951 entry concerns PropertyMax Pro FREE 0.3, where a Cross-site Scripting (XSS) vulnerability exists in index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action. This is documented across multiple sources (NVD entry and ...