108 matches found
CVE-2007-2416
CVE-2007-2416 pertains to an SQL injection in the E-Annu application, specifically in home.php where the parameter a is user-controlled. The vulnerability allows remote attackers to execute arbitrary SQL commands via that a parameter, enabling partial confidentiality and integrity impact and pote...
CVE-2007-2416
SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter...
CVE-2006-5074
Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter...
PHP Invoice 2.2 (Billing and client Management) home.php Xss vuln.
description : ------------- PHP Invoice designed to automate your entire account, order, billing, ticket system needs. From displaying your sales content, to ordering, PHP Invoice will handle all your billing and authentication requirements with speed and ease. No Matter Webmaster, Web Designer,...
PHP Invoice 2.2 - 'home.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting use...
phpQuiz 0.1.2 - SQL Injection / Code Execution
Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...
