CVE-2008-3603

CVE-2008-3603 describes a SQL injection in Vacation Rental Script 3.0 (index.php) where the id parameter in a sections action enables remote attackers to execute arbitrary SQL commands. Root cause: unsafely concatenated user input in the query. Impact per the CVSS: partial confidentiality, integr...

CVE-2006-2651

The CVE-2006-2651 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Vacation Rental Script 1.0. Attackers can inject arbitrary web script or HTML via the obj parameter. The vulnerability is described across multiple sources (NVD, CVE List, PRION, prion, etc.), confirming ...