CVE-2009-0104

CVE-2009-0104 affects EZpack 4.2b2, with a vulnerability in the index.php webboard action that allows SQL injection via the qType parameter. The underlying issue is in the handling of the qType input, enabling an attacker to run arbitrary SQL commands remotely. Documents consistently identify the...

CVE-2009-0105

CVE-2009-0105 describes an XSS vulnerability in EZpack 4.2b2, where index.php is vulnerable via the mdfd parameter in a prog action. The issue allows remote attackers to inject arbitrary web script or HTML; CVSSv2 base score 4.3 (Medium) with Network access, no authentication, and partial integri...