7228 matches found
CVE-2006-0101
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2006-0101
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2005-4627
CVE-2005-4627 is a cross-site scripting (XSS) vulnerability described for index.php affecting GmailSite 1.0–1.0.4 and GFHost 0.1.1–0.4.2. The issue allows remote attackers to inject arbitrary web script or HTML via the lng parameter, impacting confidentiality/ integrity of affected sessions as pe...
CVE-2006-0093
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0093
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0090
CVE-2006-0090 describes a directory traversal vulnerability in IDV Directory Viewer (index.php) prior to 2005.1. An attacker can exploit the vulnerability by supplying a "dir" parameter containing ".." to view arbitrary directory contents. The connected documents confirm the affected product and ...
CVE-2006-0086
Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-0093
CVE-2006-0093 describes a Cross-site Scripting (XSS) vulnerability in index.php of @Card ME PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter. According to the NVD entry, the flaw has a CVSS v2 base score of 4.3 (Medium) with network access and no...
CVE-2005-4616
SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the includefile parameter...
CVE-2005-4616
CVE-2005-4616 concerns an SQL injection in index.php of iSupport 1.06 via the include_file parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability (as per the provided CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, ...
CVE-2005-4608
SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the 1 devWherePair0, 2 orderBy, and 3 where parameters...
CVE-2005-4609
The CVE describes a vulnerability in BugPort, affecting index.php in version 1.147 and earlier. The underlying issue is that an invalid action parameter allows remote attackers to disclose sensitive information, including full path and system configuration. The available records do not specify af...
CVE-2005-4608
CVE-2005-4608 : Affects BugPort 1.147 (index.php). The vulnerability is a SQL injection in the parameters (1) devWherePair[0], (2) orderBy, (3) where, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input parameters leading to SQL injection. Impact: d...
Sql injection
SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...
Sql injection
SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter...
CVE-2006-0065
CVE-2006-0065 describes an SQL injection vulnerability in VEGO Web Forum versions up to and including 1.26, affecting (1) functions.php, (2) functions_update.php, and (3) functions_display.php. The flaw allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index....
CVE-2006-0066
CVE-2006-0066 affects PHPjournaler 1.0. The vulnerability is an SQL injection in index.php via the readold parameter, allowing remote execution of arbitrary SQL commands. Root cause appears to be unsanitized user input in the query. No remediation details are provided in the connected documents.