7229 matches found
CVE-2006-1496
Multiple cross-site scripting XSS vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via 1 a remote URL in the page parameter, which is processed by an fopen call, or 2 HTML or script in the page parameter, which is returned to the client in...
CVE-2006-1496
CVE-2006-1496 describes multiple cross-site scripting (XSS) vulnerabilities in ViHor Design’s index.php. The vulnerability arises from the vulnerable page parameter being used in two ways: (1) as a remote URL supplied to fopen, and (2) as HTML or script content that is echoed back to the client i...
CVE-2006-1497
CVE-2006-1497 is a directory traversal vulnerability in ViHor Design’s index.php. The vulnerability arises from handling of the page parameter, enabling remote attackers to read arbitrary files on the affected system. The NVD entry lists a MEDIUM base score (CVSSv2: AV:N/AC:L/Au:N/C:P/I:N/A:N) wi...
CVE-2006-1482
CVE-2006-1482 is an XSS vulnerability in ConfTool 1.1, triggered by the page parameter in index.php. An attacker can inject arbitrary web script/HTML, potentially executing in a user’s browser when the affected page is viewed. The vulnerability is documented across multiple sources (NVD entry for...
SQL-Injection and XSS in uTopsites 1.5.1
Advisory: SQL-Injection and XSS in uTopsites 1.5.1. Уязвимый скрипт: index.php Sql-injection: http://www.listrank.com/index.php?do=out&id='22 Xss: http://www.listrank.com/index.php?o=scriptalert/script&start=50 При добавлении комментариев не фильтруется ни одно поле. Пример: "scriptalert/script"...
XSS in In-link 2.2.6
Advisory: XSS in In-link 2.2.6 Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://mailinfo.ru/catalog/index.php?sid=27795275575&t=login&attach=27t=modify"scriptalert/script"...
XSS in Monster Top List 1.4
Advisory: XSS in Monster Top List 1.4 Home Page: http://www.monstertoplist.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://www.monstertoplist.com/mtl14/index.php?usererrormessage=scriptalert/script...
Sql injection
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...
Sql injection
SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-1426
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...
CVE-2006-1426
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...
Pixel Motion - index.php?date SQL Injection
Pixel Motion - index.php?date SQL Injection source: https://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...
Nuked-klaN 1.x - index.php SQL Injection
Nuked-klaN 1.x - index.php SQL Injection source: https://www.securityfocus.com/bid/17233/info Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...
DSLogin 1.0 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...
VihorDesign - index.php Cross-Site Scripting
VihorDesign - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17226/info VihorDesign is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Sql injection
Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...
CVE-2006-1360
CVE-2006-1360 describes multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2. Attack via parameters (id, type, show to index.php; message1 or message to cart.php) can allow remote attackers to execute arbitrary SQL commands. The description specifies the vulnerable inputs but does not pr...
CVE-2006-1349
Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...