CVE-2006-2651

Cross-site scripting XSS vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter...

CVE-2006-2633

The CVE-2006-2633 entry describes an absolute path traversal in ByteHoard 2.1 and earlier, where the copy action in index.php can be exploited by remote authenticated users to create or overwrite files in other users’ directories by supplying the absolute directory path in infolder and the filena...

CoolPHP - index.php Cross-Site Scripting

CoolPHP - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18124/info CoolPHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

iBoutique.MALL - Directory Traversal

iBoutique.MALL Homepage: http://www.netartmedia.net/mall/ Description: Based on iBoutique 4.0, iBoutique.MALL is a powerful multi user mall software solution. It makes possible for the new vendors to signup and create their own customized online stores with ease. Effected files: index.php Directo...

AlstraSoft E-Friends - XSS

AlstraSoft E-Friends - XSS Homepage: http://www.alstrasoft.com/ Description: Alstrasoft E-friends allows you to run a community site like MySpace and Friendster. Effected files or areas of site: index.php The input forms on the following items belowdo not properlly filter out all potential harmfu...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 homepage, 3 email, and 4 address parameters...

Sql injection

SQL injection vulnerability in index.php in DGBook 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 homepage, 4 address, 5 comment, and 6 ip parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2573

SQL injection vulnerability in index.php in DGBook 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 homepage, 4 address, 5 comment, and 6 ip parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2573

DGBook 1.0 is affected by a SQL injection in index.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject and execute arbitrary SQL via the following parameters: name, email, homepage, address, comment, and ip. The issue stems from unsafe handling of user input...

CVE-2006-2535

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 index.php, 2 song.php, 3 faq.php, 4 list.php, 5 genm3u.php, and 6 playlist.php...

CVE-2006-2423

The CVE-2006-2423 entry concerns a Cross-site Scripting (XSS) vulnerability in ftplogin/index.php of Confixx 3.1.2. The vulnerability arises from unvalidated input in the login parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected component: Confixx 3.1.2, specific...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 rep parameter to a index.php or b diapo.php or 2 image parameter to c affich.php. NOTE: item 1a might be resultant from directory traversal...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function...

CVE-2006-2368

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-2368

CVE-2006-2368 is an XSS vulnerability in Clansys (aka Clanpage System) 1.1, exploitable via the page parameter in index.php. The vulnerability permits remote attackers to inject arbitrary script/HTML. From the supplied sources (NVD/NIST), the attack vector is network-based with no authentication,...