← Back

Discussion

discussion

Vendor: Xhawk.net • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Xhawk.net
1Discussion
Apr 16, 2026
Mar 19, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter.
1Xhawk.net
1Discussion
Apr 16, 2026
Mar 19, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.