7229 matches found
CVE-2006-2367
CVE-2006-2367 is a cross-site scripting (XSS) vulnerability in Clansys (Clanpage System) versions 1.0 and 1.1. The flaw resides in index.php where the search function passes a user-controlled func parameter, enabling remote attackers to inject arbitrary web script or HTML. The published entries c...
Limbo weblinks.html.php catid Parameter SQL Injection
The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...
CVE-2006-2339
CVE-2006-2339 affects evoTopsites 2.x and evoTopsites Pro 2.x. The vulnerability is an SQL injection in index.php exploitable via the cat_id and id parameters, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected components and the underlying c...
CVE-2006-2325
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2326
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
CVE-2006-2325
CVE-2006-2325 describes a cross-site scripting (XSS) vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. It allows remote attackers to inject arbitrary web script or HTML via the read parameter, with the note that the issue might originate from directory trav...
Cross site scripting
Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2294
Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2262
Cross-site scripting XSS vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter...
CVE-2006-2257
Cross-site scripting XSS vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web script or HTML via the curryear parameter...
CVE-2006-2257
CVE-2006-2257 is an XSS vulnerability affecting easyEvent 1.2, disclosed for index.php via the curr_year parameter. The underlying issue is improper handling of user-supplied input leading to script/HTML injection. Affected component: index.php in easyEvent 1.2. Impact per sources is partial conf...
CVE-2006-2262
The CVE-2006-2262 entry documents a Cross-site scripting (XSS) vulnerability in the file index.php of the Singapore 0.9.7 project. The vulnerability is triggered via the image parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the description, this affects S...
singapore v0.9.7 XSS Vulnerabilities
SOFTWARE: ========= singapore v0.9.7 DESCRIPTION: ============ The system is vulnerable to various XSS attacks google dork : "Powered by singapore v0.9.7" inurl:index.php?gallery 429 results : xss code example ================ www.site.com/images/index.php?gallery=gallery...
SQL-Injection in evoArticles
Advisory: SQL-Injection in evoArticles Home Page: http://evo-dev.com/ Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: index.php http://www.target.com/index.php?do=cat&total=19&cid=37&sort=date&order=desc'&page=2...
SaPHPLession30.txt
SaPHPLesson 3.0 Multbugs By :-- D3vil-0x1 | Devil-00 --: 1- Unfilter array Filename :- show.php Line :- 102 code $hrow = $Row2;/code Fix :- Add To Line 11 /show.php This Code :- we add the code to global to fix all unfilter ver. at the code : code $hrow = array;/code Exploit :- GET ^...
CVE-2006-2211
Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter...
CVE-2006-2209
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
Sql injection
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...