PT-2005-4687 · Php · Php Upload Center

Name of the Vulnerable Software and Affected Versions: PHP Upload Center affected versions not specified Description: A directory traversal issue exists in index.php, allowing remote attackers to read arbitrary files by including "../" sequences in the filename parameter of the vulnerable API...

CVE-2005-3924

SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the 1 kategorieid and 2 katid parameters...

CVE-2005-3924

CVE-2005-3924 is a SQL injection vulnerability in Randshop, specifically in themes/kategorie/index.php. The issue allows remote attackers to execute arbitrary SQL commands through the kategorieid and katid parameters. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low co...

CVE-2005-3920

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3909

CVE-2005-3909 describes an SQL injection vulnerability in the merchants/index.php file of Post Affiliate Pro 2.0.4 and earlier . The vulnerability allows remote attackers to inject arbitrary SQL via the sortorder parameter, potentially impacting confidentiality, integrity, and availability. The c...

CVE-2005-3874

SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pentry parameter in an entry command to index.php...

CVE-2005-3868

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term, 2 id, 3 stat, and 4 source parameters to index.php, and 5 through the image parameters with an add request...

CVE-2005-3864

SQL injection vulnerability in SourceWell prior to or at version 1.1.2 (and conflicting reports for 1.1.3) allows remote attackers to execute arbitrary SQL commands via the cnt parameter in index.php. The issue is exploitable remotely over the network with no authentication required and can lead ...

CVE-2005-3869

The CVE-2005-3869 entry describes a Cross-site scripting (XSS) flaw in index.php of Google API Search 1.3.1 and earlier, exploitable via hex-encoded values in the REQ parameter to inject arbitrary script/HTML. Affected software: Google API Search 1.3.1 and earlier. Impact per the source: user-fac...

CVE-2005-3874

CVE-2005-3874 describes an SQL injection in Netzbrett 1.5.1 and earlier caused by unsafely handling the p_entry parameter in the entry command to index.php via netzbr.php. The vulnerability allows a remote attacker to craft input that alters SQL queries, enabling arbitrary SQL command execution. ...

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2004-2574

Cross-site scripting XSS vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction...

K-Search Multiple vuln.

K-Search Multiple vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/k-search-multiple-vuln.html Vendor:http://turn-k.net/k-search affected version:1.0 and prior Product Description: K-Search is very fast and highly customizable meta-search...

CVE-2005-3854

Cross-site scripting XSS vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2005-3844

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

CVE-2005-3844

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

CVE-2005-3842

The CVE-2005-3842 entry concerns a SQL injection vulnerability in index.php of the pdjk-support suite, version 1.1a and earlier. The flaw allows remote attackers to inject arbitrary SQL via the rowstart, news_id, and faq_id parameters, potentially impacting confidentiality, integrity, and availab...

CVE-2005-3844

CVE-2005-3844 concerns a SQL injection vulnerability in the phpWordWordPress PHP News and Article Manager 3.0. The issue allows remote attackers to execute arbitrary SQL commands via parameters: (1) poll and (2) category in index.php, and (3) ctg in an archive action. Affected software is the PHP...

CVE-2005-3830

Affected software/issue. ActiveCampaign SupportTrio 1.4 and earlier is affected by a directory traversal vulnerability in index.php, allowing remote attackers to read or include arbitrary files via the page parameter. This is the root cause described as a directory traversal issue, with potential...

CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...