CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

FaqRing 3.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || FaqRing 3.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://faqsystems.com/index.shtml Greetings : Mizoz, Zuka,...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username...

Sql injection

Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, as accessible from a form generated by index.php...

CVE-2008-6906

CVE-2008-6906 describes a cross-site scripting (XSS) vulnerability in BabbleBoard 1.1.6, specifically in the index.php file where an attacker can inject arbitrary web script or HTML via the username parameter. The issue is categorized with a low‑to‑moderate impact (CVSSv2 base score 4.3, MEDIUM) ...

CVE-2008-6905

CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...

In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability

No description provided by source. @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author : Angela Chang Contact ...

CVE-2009-2642

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...

CVE-2009-2642

The CVE-2009-2642 issue affects Desi Short URL Script 1.0, where index.php allows remote attackers to bypass authentication by tampering with cookies: set logged=1 and uid= (example 13). This indicates insufficient server-side validation of session cookies, enabling partial integrity and confiden...

Shop Script Cross Site Scripting

® -SHOP-SCRIPT XSS Remote Vulnerabilities- Script : shop-script premium Language : php Web Site : http://www.shop-script.com Autor : u.f. Thanks to : Jason, bull, T0r3x, Clark, Meth0d and all members r1zen.org Exploit Info Vuln is : /index.php? http://www.localhost.com/index.php?searchstring=XSS...

Sql injection

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2599

SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action...

CVE-2009-2601

SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...

CVE-2009-2598

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2603

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

CVE-2009-2603

CVE-2009-2603 : The content shows concrete details: Escon SupportPortal Pro 3.0 contains multiple SQL injection flaws in index.php, exploitable via the (1) cat and (2) tid parameters. Remote attackers could execute arbitrary SQL commands. Impact is partial confidentiality, integrity, and availabi...

Basilic 1.5.13 - index.php Cross-Site Scripting

Basilic 1.5.13 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43372/info Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2009-2589

Multiple cross-site scripting XSS vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...

Basilic 1.5.13 - index.php?idAuthor SQL Injection

Basilic 1.5.13 - index.php?idAuthor SQL Injection ================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download :...

Basilic 1.5.13 SQL Injection

================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz...