CVE-2006-3181

The CVE-2006-3181 issue affects MobeScripts Mobile Space Community 2.0: SQL injection in index.php where the browse parameter can be abused by a remote attacker to execute arbitrary SQL commands. Affected product/component: index.php in the Mobile Space Community 2.0 package (MobeScripts). Root c...

CVE-2006-3181

SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter...

CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3182

Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the uid parameter in the rss page...

CVE-2006-3195

CVE-2006-3195 describes a cross-site scripting (XSS) vulnerability in the Singapore CMS prior to 0.10.0, exploitable via the template parameter in index.php. The root cause is insufficient sanitization of the template parameter, allowing remote attackers to inject arbitrary web script or HTML tha...

CVE-2006-3194

CVE-2006-3194 affects the Singapore project up to version 0.10.0 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files by injecting a .. sequence and a trailing null (%00) byte into the (1) gallery or (2) template parameters. The vulnerability enable...

CVE-2006-3196

CVE-2006-3196 affects the Singapore CMS (versions 0.10.0 and earlier). The flaw lies in index.php where an invalid template parameter causes an error message that reveals the installation path, enabling a remote attacker to obtain the server path. The connected documents confirm the vulnerability...

CVE-2006-3138

Multiple cross-site scripting XSS vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PIC parameter in offers-pix.php, 2 from parameter in cp/index.php, and 3 action parameter in cp/adminindex.php...

CVE-2006-3158

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action...

CVE-2006-3150

SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2006-3140

CVE-2006-3140: SQL injection in index.php of openCI 1.0 BETA 0.20.1 and earlier; remote attackers can manipulate the id parameter to execute arbitrary SQL commands. This is a network-accessible vulnerability with low complexity and no authentication, impacting data confidentiality/ integrity/ ava...

CVE-2006-3151

CVE-2006-3151 is a cross-site scripting (XSS) vulnerability in AssoCIateD (ACID) 1.2.0 and earlier. It affects index.php via the menu parameter, allowing remote attackers to inject arbitrary web script or HTML. No remediation or exploit details are provided in the connected documents.

CVE-2006-3140

SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3157

CVE-2006-3157 describes a Cross-site scripting (XSS) vulnerability in index.php of Thinkfactory UltimateGoogle 1.00 and earlier, exploitable via the REQ parameter to inject arbitrary web script or HTML. The CVSSv2 base score is 5.8 (Medium) with network attack vector and no user interaction requi...

CVE-2006-3151

Cross-site scripting XSS vulnerability in index.php in AssoCIateD aka ACID 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter...

CVE-2006-3130

CVE-2006-3130 describes an SQL injection in Clubpage’s index.php via the category parameter. Affected: Clubpage, component: index.php. Root cause: insufficient input validation on the category parameter leading to arbitrary SQL execution. Impact per linked records: data confidentiality, integrity...

CVE-2006-3129

NC LinkList 1.2 and earlier are affected by cross-site scripting in index.php, exploitable via the (1) cat and (2) view parameters. Root cause: insufficient sanitization of user input. Impact: script execution in affected users’ browsers. Affected versions: 1.2 and earlier. CVSS base score: 4.3 (...

CVE-2006-3106

CVE-2006-3106 describes a cross-site scripting (XSS) vulnerability in index.php of phpMyDesktop|Arcade 1.0 . The flaw is triggered by the subsite parameter in the subsite todo feature, enabling remote attackers to inject arbitrary web script or HTML. The public reports indicate an XSS risk with a...

CVE-2006-3103

CVE-2006-3103 describes a cross-site scripting (XSS) vulnerability in Bitweaver 1.3, allowing remote attackers to inject arbitrary web script or HTML via (1) the error parameter in users/login.php and (2) the feedback parameter in articles/index.php. The connected records confirm Bitweaver as the...

CVE-2006-3105

Technical details about CVE-2006-3105 are not publicly provided in the connected documents. The available sources reproduce the description but do not specify affected products/versions, root cause, or fixes. Monitor for updates.