CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

The CVE-2006-3088 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Car Classifieds that allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. The vulnerability is triggered through a crafted make_id value, enabling script execution in ...

CVE-2006-3060

Cross-site scripting XSS vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the 1 read parameter in index.php, 2 farea parameter in faq.php, and 3 unspecified input fields on the "My Account" login page...

CVE-2006-3062

The CVE-2006-3062 entry concerns a cross-site scripting (XSS) flaw in myPHP Guestbook 2.0.4 and older, exploitable via the lang parameter in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Public references confirm the affected application/version comb...

CVE-2006-3063

The CVE-2006-3063 entry describes multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and prior to 2.0.1 RC5. The flaw allows remote attackers to inject arbitrary script or HTML via user-supplied content in specific parameters across multiple pages: (a) ind...

CVE-2006-3036

Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...

CVE-2006-3038

The CVE-2006-3038 issue affects Cescripts Realty Room Rent (index.php) where XSS is possible through the sel_menu parameter. The underlying flaw is improper sanitization of user input, enabling injection of arbitrary script/HTML. The NVD entry notes the vendor acknowledged the issues and addresse...

myphp202.txt

a xss attack is possible in index.php http://127.0.01/myphp/index.php?lang="alert1337...

CVE-2006-3010

Multiple SQL injection vulnerabilities in Open Business Management OBM 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the 1 neworder and 2 orderdir parameters to a index.php, b group/groupindex.php, c user/userindex.php, d list/listindex.php, and e company/companyindex.php...

CVE-2006-2994

Multiple cross-site scripting XSS vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, 3 url fields, and 4 text field content parameter...

CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2985

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...

CVE-2006-2994

PhazizGuestbook 2.0 is affected by XSS in index.php. The vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through the (1) name, (2) email, (3) url, and (4) text (content) fields. The description from CVE-2006-2994 is consistent across NVD/NIST references. No concrete...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

CVE-2006-2985

This CVE concerns SQL injection in IntegraMOD 1.4.0 (and earlier) via the STYLE_URL parameter in index.php. The root cause is unsafely encoded input (double-encoded a single quote), allowing remote attackers to craft SQL commands. Public records (NVD/NVD-derived CVE listing) confirm the affected ...

MIME-tools 5.411 (Entity 5.404)

a xss attack is possible in index.php http://127.0.01/myphp/index.php?lang="scriptalert1337/script...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...