CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...

CVE-2005-3825

The CVE-2005-3825 entry concerns a SQL injection in Comdev Vote Caster (version 3.1 and earlier) via the campaign_id parameter in a result action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the NVD listing a CVSSv2 base score of 7.5 (HIGH) and a network atta...

iSupport 1.x "include_file" SQL inj.

iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...

sNews 1.3 SQL injection.

sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...

phpWordPress 3.0 SQL inj.

phpWordPress Article Manager 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/phpwordpress-30-sql-inj.html Vendor:http://www.word-press.net/ affected version: 3.0 and prior. Vuln. Description: Input passed to the "poll" "category" and...

CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

CVE-2005-3798

The CVE-2005-3798 entry describes a SQL injection vulnerability in the admin/index.php script of AlstraSoft Template Seller Pro 3.25 . The underlying issue is an injectable username parameter that permits remote attackers to execute arbitrary SQL commands. This is the only concrete detail provide...

CVE-2005-3744

CVE-2005-3744 describes a SQL injection vulnerability in the PHP application phpComasy, affecting version 0.7.5 and earlier. The flaw is claimed to be exploitable via the parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Note: the 0.7.5 source reportedly does n...

CVE-2005-3744

SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php...

CVE-2005-3697

Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...

CVE-2005-3679

CVE-2005-3679 describes an SQL injection in ActiveCampaign 1-2-All Broadcast Email, specifically in admin/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Affected component: ActiveC...

CVE-2005-3348

CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...

class-1 Poll Software Multiple SQL Injection Vulnerabilities.

class-1 Poll Software Multiple SQL Injection Vulnerabilities. Author: r0t hackers.by.lv Date: 17 nov. 2005 Software:class-1 Poll Software v 0.4 Vendor:http://www.class1web.co.uk/ affected: v 0.4 and prior Description: Input passed to the "pollid" and "previouspoll" parameter in "index.php" isn't...

CVE-2005-3558

PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the 1 page and 2 site parameters...

CVE-2005-3558

PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the 1 page and 2 site parameters...

CVE-2005-3572

SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter...

CVE-2005-3574

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

CVE-2005-3592

The CVE-2005-3592 entry documents a path disclosure vulnerability in CuteNews 1.4.0 and earlier. An attacker can trigger an error message (for example by supplying multiple ../ sequences in the archive parameter) to obtain the installation path of the application. This is a information-disclosure...

CVE-2005-3572

Summary: CVE-2005-3572 is a SQL injection in the Peel CMS, affecting index.php for Peel versions 2.6–2.7, where the rubid parameter can be used by remote attackers to execute arbitrary SQL commands. Related entries (e.g., CVE-2008-6892 and mirrors in CVE/CVELIST records) reference Peel 3.x (such ...

CVE-2005-3574

CVE-2005-3574 affects iCMS (PHP) via index.php. The vulnerability allows remote attackers to include arbitrary files through the page parameter, enabling a network-based attack with no authentication. The CVSSv2 base metrics in the provided data indicate a MEDIUM severity, with partial confidenti...