CVE-2009-2590

CVE-2009-2590 describes an SQL injection vulnerability in the Hutscripts PHP Website Script, specifically affecting the showcategory.php component where the cid parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. The affected software is referenced as Hutscr...

CVE-2009-2589

CVE-2009-2589 involves multiple cross-site scripting (XSS) vulnerabilities in the Hutscripts PHP Website Script . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter to three pages: feedback.php , index.php , and lostpassword.php . The NVD entry lists a ...