CVE-2006-1634

CVE-2006-1634 corresponds to a cross-site scripting (XSS) vulnerability in LucidCMS 2.0.0 RC4, exploitable via the command parameter in index.php. The XSS could allow remote attackers to inject arbitrary script/HTML. Affected product is LucidCMS 2.0.0 RC4; root cause is improper handling of user-...

CVE-2006-1622

Cross-site scripting XSS vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via 1 the description parameter to linklist.php and possibly other vectors involving 2 index.php and 3 linksubmit.php...

CVE-2006-1622

CVE-2006-1622 describes a cross-site scripting (XSS) vulnerability in PHPSelect linksubmit. The issue arises from unsanitized input, allowing remote attackers to inject arbitrary script/HTML via the description parameter to linklist.php and potentially via index.php and linksubmit.php. Affected c...

CVE-2006-1622

Cross-site scripting XSS vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via 1 the description parameter to linklist.php and possibly other vectors involving 2 index.php and 3 linksubmit.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase aphpkb 0.57 allow remote attackers to inject arbitrary web script or HTML via the 1 keywordlist parameter to a index.php; 2 title, 3 article, 4 author, and 5 keywords parameters to b submitarticle.php; and 6 Question, 7...

CVE-2006-1438

The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...

Directory traversal

Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2006-1581

Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2006-1582

CVE-2006-1582 describes a cross-site scripting (XSS) vulnerability in Blank'N'Berg 0.2, exploitable via the _path parameter in index.php. The root cause is an injection of arbitrary web script/HTML, potentially stemming from a directory traversal-related issue noted in the description. Affected s...

CVE-2006-1585

CVE-2006-1585 affects MonAlbum 0.8.7, with multiple SQL injection vulnerabilities exposing the app to remote command execution through user-supplied input in the following parameters: pc (index.php) and pnom , pcourriel , pcommentaire (image_agrandir.php). The root cause is unsafely constructed S...

CVE-2006-1562

Multiple cross-site scripting XSS vulnerabilities in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 autor, 2 www, 3 temat, and 4 tresc parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 autor, 2 www, 3 temat, and 4 tresc parameters...

CVE-2006-1557

Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the 1 from and 2 into parameters in a calculate action, and the 3 id parameter in an edit action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the 1 from and 2 into parameters in a calculate action, and the 3 id parameter in an edit action to index.php...

CVE-2006-1562

The CVE-2006-1562 entry concerns vulnerable [V]Book (aka VScripts/VBook) version 2.0 by Kuba Kunkiewicz. Multiple cross-site scripting (XSS) vulnerabilities exist in index.php, exploitable via four parameters (autor, www, temat, tresc). The underlying issue is insufficient input sanitization, all...

MonAlbum 0.8.7 SQL Injection

advisory by undefined1 @ bash-x.net/undef/ Mon Album 0.8.7 http://www.3dsrc.com/monalbum/ There are 2 sql injection flaws in MonAlbum 0.8.7. First in index.php line 99 if isset$GET"pc" $pc = $GET"pc"; ... no sanity checks if isset$pc && $grechinactive $result = executerequete"select idrub, nom,...

Sql injection

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action...

CVE-2006-1501

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action...

CVE-2006-1496

Multiple cross-site scripting XSS vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via 1 a remote URL in the page parameter, which is processed by an fopen call, or 2 HTML or script in the page parameter, which is returned to the client in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via 1 a remote URL in the page parameter, which is processed by an fopen call, or 2 HTML or script in the page parameter, which is returned to the client in...