CVE-2006-3155

This CVE (CVE-2006-3155) affects Ultimate Auction 1.0 and earlier. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via user-controlled input parameters in several scripts: (1) item parameter in emailtofrien...

CVE-2006-3153

The CVE-2006-3153 issue is a cross-site scripting (XSS) vulnerability in index.pl of Ultimate Estate 1.0 and earlier. The vulnerability arises from the cat parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected product: Ultimate Estate (version 1.0 and earlier). Roo...

CVE-2006-3154

CVE-2006-3154 describes an SQL injection in index.pl of Ultimate Estate 1.0 and earlier, exploitable via the id parameter. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands, with a CVSS v2 base score of 7.5 (HIGH) and network/low complexity exposure with no a...