CVE-2005-4415

CVE-2005-4415 describes a cross-site scripting (XSS) vulnerability in index.php of TML CMS 0.5 , allowing remote attackers to inject arbitrary web script or HTML via the form parameter. The known impact is partial integrity loss and potential user-script execution, with the CVSS base score of 4.3...

CVE-2005-4403

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2005-4353

The CVE-2005-4353 entry describes an SQL injection in toendaCMS 0.6.2.1 when configured to use a SQL database. The vulnerability occurs in index.php and allows remote attackers to alter or extract data by injecting arbitrary SQL through the id parameter. Affected product: toendaCMS 0.6.2.1 (SQL-e...

PHP Fusebox 3.0 - index.php Cross-Site Scripting

PHP Fusebox 3.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15924/info PHP Fusebox is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

CVE-2005-4318

CVE-2005-4318 is a SQL injection vulnerability in Limbo CMS 1.0.4.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands through the _SERVER[REMOTE_ADDR] parameter, which alters the underlying $_SERVER variable when register_globals is off. Affected software is Limbo CM...

CVE-2005-4304

index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid catid parameter, which leaks the full pathname in an error message. NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details...

CVE-2005-4308

index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter...

CVE-2005-4308

index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter...

CVE-2005-4308

Affected software: ezUpload Pro 2.2 and earlier. Vulnerability: remote attackers can include files via the mode parameter in index.php, enabling possible RFI. Root cause: improper handling of the mode parameter leading to file inclusion. Impact (per CVSS): partial confidentiality, integrity, and ...

CVE-2005-4303

CVE-2005-4303 affects ezDatabase 2.1.2 and earlier via a SQL injection in index.php where the db_id parameter enables remote attackers to execute arbitrary SQL commands. The vulnerability is documented with a High base score (7.5, NETWORK attack, no authentication) and partial impact on confident...

CVE-2005-4304

CVE-2005-4304 affects ezDatabase versions up to 2.1.2 and earlier. The issue is triggered by an invalid cat_id parameter in index.php, leading to leakage of a full pathname in an error message. The description notes uncertainty about details due to report terminology problems and partial feedback...

CVE-2005-4277

Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-4277

Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-4287

PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php...

CVE-2005-4264

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

CVE-2005-4264

CVE-2005-4264 affects PHP Support Tickets 2.0 with multiple SQL injection flaws in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the username, password, or id parameters, enabling manipulation of queries and potential authentication bypass or administrative ...

CVE-2005-4232

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-4232

Jamit Job Board is affected: SQL injection in index.php via the cat parameter for versions 2.4.1 and earlier. The underlying issue is a vulnerable dynamic SQL path in index.php, allowing remote attackers to execute arbitrary SQL commands. The vendor disputes the issue, and CVE records note that s...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...