7229 matches found
CVE-2006-1349
Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...
CVE-2006-1332
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...
CVE-2006-1331
Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...
CVE-2006-1331
CVE-2006-1331 describes multiple cross-site scripting (XSS) vulnerabilities in Noah's Classifieds 1.3 and earlier, exploitable via the index.php parameters (1) method or (2) list. Root cause is inadequate input handling/validation in these parameters, enabling remote attackers to inject arbitrary...
CVE-2005-4732
CVE-2005-4732 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of Tux Bank/TuxRacer 0.7x and 0.8, exploitable via the (1) name and (2) description parameters. Impact is remote script/HTML injection; CVSSv2 base score 4.3 (Medium). Connected documents confirm the issue bu...
CVE-2005-4743
The CVE-2005-4743 vulnerability concerns NeLogic Nephp Publisher 4.5.2 and earlier, where SQL injection is possible in index.php via the parameters (1) id and (2) nnet_catid). The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL comm...
CVE-2006-1271
SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynewscommentid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...
CVE-2006-1259
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...
XSS in eBoard alpha 3.1
Advisory: eBoard alpha 3.1 Home Page: http://www.edge-programming.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php http://koti.mbnet.fi/stinger/eboard/index.php?a=topic&forum=1&topic=10"scriptalert/script"...
SQL-injection and XSS in photokorn gallery
Advisory: SQL-injection and XSS in photokorn gallery Home Page: http://www.telekorn.com Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: search.php http://www.stockvault.net/gallery/search.php?action=search&type=detail&where=keywords'&keyword=dotted Раскрытие установочно...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prev, 2 next, and 3 rand5 parameters in a index.php; the 4 rusername and 5 rloc parameters in b newtopic.php; the 6 rnum, 7 rfamilyname, 8...
DSCounter 1.2 - index.php SQL Injection
DSCounter 1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 from and 2 help parameters to a index.php; 3 action, 4 page, 5 debug, 6 help, 7 username, or 8 password parameters to b login.php; the 7 help parameter to c...
Cross site scripting
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1152
CVE-2006-1152 affects M-Phorum 0.2. The issue is a PHP remote file inclusion in index.php where an attacker can include arbitrary files through the go parameter. According to the NVD entry, the vulnerability has a CVSSv2 base score of 5.0 (Medium) with network attack vector, low complexity, no au...