Vulnerabilities

TI-2009-00788 CVE-2009-0830 · GHSA-732f-w5mf-w62p

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject…

LOW 22

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2009-03-05 No fix listed CWE-79

TI-2009-00787 CVE-2009-0829 · GHSA-cxq6-6473-qf7m

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2009-03-05 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject…

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute…