CVE-2008-5290

The CVE-2008-5290 entry documents a cross-site scripting (XSS) vulnerability in Werner Hilversum Clean CMS 1.5. The flaw affects the full_txt.php component, where user-supplied input via the id parameter can be reflected in output, enabling an attacker to inject arbitrary web script or HTML. This...

CVE-2008-5289

CVE-2008-5289 describes a SQL injection vulnerability in the Clean CMS 1.5 product, specific to the full_txt.php endpoint. The vulnerability arises from unsafely handling the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. Documented sources (NVD, CVE listing...