CVE-2006-1007

N8cms versions 1.1 and 1.2 are affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the dir and page_id parameters to index.php. The issue is confirmed across multiple authoritative records (e.g., CVE-2006-1007/NVD) and is described ...

CVE-2006-0983

Cross-site scripting XSS vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...

CVE-2006-0983

CVE-2006-0983 affects QwikiWiki version 1.4, specifically the index.php page, with a cross-site scripting (XSS) flaw exploitable via the page parameter. The underlying issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts indicate XSS risk, but no explicit remed...

CVE-2006-0969

The CVE-2006-0969 entry concerns a PHP remote file inclusion vulnerability in the page parameter of index.php within Top sites de PixelArtKingdom. The underlying issue is unsafely using the page parameter in an include/require operation, enabling remote attackers to cause arbitrary file inclusion...

CVE-2006-0970

CVE-2006-0970 is a PHP remote file inclusion vulnerability in index.php used by one or more ActiveCampaign products, potentially SupportTrio. The underlying issue is improper handling of the page parameter, allowing attackers to include and execute arbitrary files. The CVSS 2.0 base score is 7.5 ...

CVE-2006-0945

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL %00 in the index parameter...

CVE-2006-0943

SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Information disclosure

U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...

CVE-2006-0937

CVE-2006-0937 affects U.N.U. Mailgust 1.9. A direct HTTP request to index.php with method=showfullcsv allows a remote attacker to disclose POP3 server configuration, including account name and password. This is an information disclosure vulnerability due to improper access to configuration data. ...

CVE-2006-0899

The vulnerability CVE-2006-0899 affects 4Images

CVE-2006-0880

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 inf parameter; or, when registerglobals is enabled, the 2 upperTemplate and 3 lowerTemplate parameters...

Directory traversal

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php...

CVE-2006-0880

CVE-2006-0880 – The Noah’s Classifieds 1.3 PHP application is vulnerable to multiple XSS flaws in index.php. Attackers can inject arbitrary script/HTML via the (1) inf parameter, and, if PHP register_globals is enabled, via the (2) upperTemplate and (3) lowerTemplate parameters. The description d...

CVE-2006-0882

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php...

CVE-2006-0821

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-0831

PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the 1 sayfaadi or 2 sayfa parameter. NOTE: this might be a site-specific issue. If so, it should not be included in CVE...

Sql injection

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-0831

The CVE-2006-0831 entry describes a PHP remote file include vulnerability in index.php of Tasarim Rehberi, allowing remote code execution via a URL supplied in the sayfaadi or sayfa parameters. The vulnerability stems from including user-controllable URLs, enabling arbitrary PHP execution if an a...