Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

CVE-2005-4140

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field...

CVE-2005-4088

SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...

CVE-2005-4088

CVE-2005-4088 describes an SQL injection vulnerability in index.php of phpForumPro 2.2 that allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. The issue affects phpForumPro 2.2 and is documented with a CVSSv2 base score of 7.5 (HIGH). Exploitation...

CVE-2005-4055

CVE-2005-4055 affects Cars Portal 1.1 and earlier; the vulnerability is a SQL injection in index.php exploitable via the (1) page and (2) car parameters, allowing remote attackers to execute arbitrary SQL commands. No remediation or patch details are provided in the connected sources here. Resear...

CVE-2005-4055

SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 page and 2 car parameters...

CVE-2005-4054

CVE-2005-4054 describes a SQL injection vulnerability in index.php of PluggedOut Blog 1.9.5 and earlier. The issue allows remote attackers to inject arbitrary SQL commands through the parameters (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day. The connected documents confirm the aff...

CVE-2005-4035

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prod, and 2 brid parameters to a view.php; the 3 the bid parameter to b viewbrands.php; and the 4 grp and 5 cat parameters to...

CVE-2005-4034

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 pg, and 3 sortb parameters to a index.php; 4 cid parameter to b gift.php and c fq.php; and 5 cat parameter to d articles.php...

CVE-2005-4019

SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter...

CVE-2005-4019

CVE-2005-4019 affects Relative Real Estate Systems, specifically versions 1.02 and earlier. It is a SQL injection in index.php exploitable via the mls parameter, allowing remote execution of arbitrary SQL commands. The vulnerability has a CVSS base score of 7.5 (HIGH) with network access, low att...

Cars Portal v1.x SQL injection.

Cars Portal v1.x SQL injection. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html vendor:http://software.getcar.biz/ affected version:v1.1 and prior Product Description: Cars Portal is a software solution for running...

Blog System v1.2 SQL inj. vuln.

Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...

CVE-2005-3954

Cross-site scripting XSS vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php...

CVE-2005-3930

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3930

The CVE-2005-3930 entry concerns N-13 News 1.2 where a vulnerability in index.php allows SQL injection through the id parameter. The underlying issue enables remote attackers to execute arbitrary SQL commands (as described in the initial record). The available documents do not specify affected ve...

CVE-2005-3956

DMANews 0.904 and 0.910 are affected by multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to inject arbitrary SQL commands through (1) the id parameter in a comments action and (2) the sortorder and (3) display_num parameters in a news_list action. The provided...

CVE-2005-3958

The CVE-2005-3958 entry identifies a SQL injection vulnerability in Entergal MX 2.0, specific to index.php via the (1) idcat parameter in a showcat action and (2) the action parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the web i...

CVE-2005-3956

Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a comments action and the 2 sortorder and 3 displaynum parameters in a newslist action...

CVE-2005-3954

Cross-site scripting XSS vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php...