CVE-2006-1264

CVE-2006-1264 affects xhawk.net discussion 2.0 beta2. The issue is a Cross-site scripting (XSS) vulnerability where a Javascript URI in a BBCode img tag can be exploited to inject arbitrary script/HTML. The core problem is user-supplied content within a BBCode image tag not properly sanitized, en...

CVE-2006-1265

CVE-2006-1265 targets the xhawk.net discussion 2.0 beta2 application, where a flaw in the discussion.class.php logic allows a remote attacker to inject SQL via the view parameter, potentially impacting confidentiality, integrity, and availability. The public data lists a base CVSS v2 score of 7.5...