CVE-2006-0590

MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...

CVE-2006-0546

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2006-0546

Technical details about CVE-2006-0546 are not publicly provided in the supplied documents; none of the connected records include affected product/version, root cause, or remediation. Monitor for updates.

CVE-2006-0546

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2006-0506

Cross-site scripting XSS vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

CVE-2005-4702

CVE-2005-4702 is an SQL injection vulnerability affecting IPBProArcade 2.5.2, reported for index.php (gameid parameter). The description indicates remote attackers could inject arbitrary SQL commands, with sources noting possible confusion with shell metacharacter-related issues and potential red...

Invision Power Board Dragoran Forum < 1.4 index.php site Parameter SQL Injection

Binary data 3397.prm...

MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection

source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to bypass authentication and gain...

MyBB 1.01.1 - index.php Referrer Cookie SQL Injection

MyBB 1.01.1 - index.php Referrer Cookie SQL Injection source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can...

[eVuln] Pixelpost Photoblog XSS Vulnerability

New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...

CVE-2006-0464

Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the 1 gotoid or 2 mid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter...

CVE-2006-0413

Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the 1 discuss, 2 tim, 3 id, 4 last, and 5 limit parameter...

CVE-2006-0415

The CVE-2006-0415 entry describes a Cross-Site Scripting (XSS) vulnerability in SleeperChat

CVE-2006-0413

NewsPHP is affected by multiple SQL injection vulnerabilities in index.php, exploitable via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameters. Remote attackers could execute arbitrary SQL commands due to unsafely constructed inputs in these parameters. The available documents d...

CVE-2006-0415

Cross-site scripting XSS vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter...

CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

Sql injection

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0409

CVE-2006-0409 describes a cross-site scripting (XSS) vulnerability in the Pixelpost Photoblog 1.4.3 implementation of index.php, exploitable via the "Add Comment" field in a comment popup. The affected component is the comment handling code in Pixelpost’s index.php, with the underlying cause bein...

CVE-2006-0403

CVE-2006-0403 affects e-moBLOG 1.3 with multiple SQL injection vulnerabilities exploitable via the (1) monthy parameter to index.php and (2) login parameter to admin/index.php. Remote attackers could execute arbitrary SQL commands. Root cause described as improper handling of user input leading t...