CVE-2009-4696

RadNICS Gold 5 contains a SQL injection in index.php via the fid parameter in the view_forum action, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2009-4697

CVE-2009-4697 concerns multiple XSS vulnerabilities in RadNICS Gold 5, specifically in index.php. The affected vectors are the (1) order parameter in a ulist action and (2) the fid parameter in a view_forum action, enabling remote attackers to inject arbitrary script/HTML. The public data consist...