CVE-2007-6125

CVE-2007-6125 is a SQL injection vulnerability in the Softbiz Freelancers Script 1, exploitable via the sb_protype parameter in search_form.php. The issue allows remote attackers to execute arbitrary SQL commands; impact vectors are stated as partial confidentiality, integrity, and availability. ...

CVE-2007-6124

CVE-2007-6124 describes a cross-site scripting (XSS) vulnerability in the Softbiz Freelancers Script 1, specifically in signin.php. The vulnerability allows a remote attacker to inject arbitrary web script or HTML by supplying a value for the errmsg parameter. The NVD entry lists a MEDIUM base sc...