CVE-2005-4407

CVE-2005-4407 describes a cross-site scripting (XSS) vulnerability in Mercury CMS versions up to 4.0, where the index.cfm script is vulnerable. The issue arises from unsafely handling the 1) content and 2) criteria parameters, allowing remote attackers to inject arbitrary web script or HTML. Expl...

CVE-2005-4406

The vulnerability CVE-2005-4406 affects Mercury CMS 4.0 and earlier, with an SQL injection in index.cfm via the page parameter. The underlying issue is improper input handling allowing remote attackers to inject arbitrary SQL commands. Impact is described as potentially partial confidentiality, i...