CVE-2008-6385

RevSense 1.0 (W3matter) is vulnerable to a cross-site scripting (XSS) flaw in index.php via the section parameter, caused by insufficient input sanitization. OpenVAS also documents an SQL injection vulnerability for RevSense <= 1.0, sharing the same root cause. Impact per sources includes pote...

CVE-2008-6310

CVE-2008-6310 describes a SQL injection in the W3matter RevSense 1.0 application, specifically in index.php where the f[password] parameter can be exploited to run arbitrary SQL commands remotely. The vulnerability arises from improper handling of user input, enabling an attacker to affect the da...