CVE-2008-3580

CVE-2008-3580 affects Qsoft K-Links, with multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via (1) the id parameter to visit.php, or (2) the PATH_INFO to the default URI under report/, addreview/, or refer/. The connected records confirm the affected produ...

CVE-2008-3581

CVE-2008-3581 is a documented cross-site scripting (XSS) vulnerability in the Qsoft K-Links product, specifically in the index.php login action. The login_message parameter is the input vector used to inject arbitrary script/HTML. The NVD entry lists a base score of 4.3 (Medium) with no confident...