CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php of phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter. Affected software: phpQuiz 0.01 (index.php, pagename parameter). Root cause: inclusion of remote file via the pagename value enabling cod...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2006-4736

Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpass parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-4754

Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...

CVE-2006-4737

Jetbox CMS contains an SQL injection in index.php via the item parameter, allowing remote injection of arbitrary web content. The description notes that the view-vector is already covered by CVE-2006-3586, indicating a related vulnerability in the same package. Root cause: unsanitized input used ...

CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2006-4736

Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpass parameters. NOTE: some of these details are obtained from third party information...

xhpXSS.txt

Hello,, XHP CMS v0.5.1 Vuls Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Xss index.php?errcode=alertdocument.cookie; Full path action.php?action=1&module=engine...

ppalCart.txt

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...

PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...

PHProg 1.0 - 'index.php?lang' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. Version 1.0 of PHProg is reported...

CVE-2006-4668

CVE-2006-4668 describes an XSS in Rob Hensley AckerTodo 4.0. The vulnerability resides in index.php where the task_id parameter used in an edit_task command can be exploited by remote attackers to inject arbitrary web script or HTML. Public references confirm the affected component as AckerTodo 4...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

CVE-2006-4634

Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...

CVE-2006-4634

CVE-2006-4634: XSS in VBZooM’s index.php via the UserID parameter. Affected: VBZooM (Web app); vulnerable component: index.php. Root cause: improper handling of user-supplied UserID enabling injection of script/HTML. Documentation confirms vulnerability description; no concrete remediation or pat...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...