7213 matches found
CVE-2005-0266
The CVE-2005-0266 entry documents a Cross-site scripting (XSS) vulnerability in SugarCRM 1.X, specifically in index.php, where an attacker can inject arbitrary web script or HTML via one of five parameters: return_module, return_action, name, module, or record. The vulnerability is exploitable re...
CVE-2005-0283
CVE-2005-0283 describes a directory traversal in QWikiwiki’s index.php that allows remote attackers to read arbitrary files by crafting the page parameter with a .. and a %00 terminator. The vulnerability stems from insufficient validation of the page parameter, enabling traversal to the file sys...
CVE-2005-0309
The CVE-2005-0309 entry affects Exponent 0.95, with two vulnerable entry points: index.php and mod.php. The underlying issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through the module parameter. The description expl...
MercuryBoard 1.1 - index.php SQL Injection
MercuryBoard 1.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/12503/info MercuryBoard is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before being used in SQL queries. The vulnerability is...
MercuryBoard 1.1 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/12503/info MercuryBoard is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before being used in SQL queries. The vulnerability is reported to affect the 'index.php' script...
CVE-2005-0217
CVE-2005-0217 affects Invision Community Blog (index.php) with the eid parameter vulnerable to SQL injection. Root cause: unsanitized input in a database query via eid. Impact: partial disclosure/integrity/availability per NVD metrics. Exploitation: remote attackers can execute arbitrary SQL comm...
Sunshop < 3.4RC2 index.php search Parameter XSS
Binary data 2590.prm...
CVE-2004-1746
Cross-site scripting XSS vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the 1 catselect or 2 show parameters...
CVE-2004-1384
Multiple cross-site scripting XSS vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 kp3, 2 type, 3 msg, 4 forumid, 5 pos, 6 catsapp, 7 catid, 8 msgballmsgnum, 9 fldballacctnum parameters to index.php or 10 ticketid to...
CVE-2004-1911
Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...
CVE-2004-1413
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the 1 subcat, 2 rate, 3 questiondetails, 4 ticketkey22, 5 email22 parameters to index.php, or 6 the e-mail field of the Forgot Key feature...
CVE-2004-2511
Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...
CVE-2004-2222
Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter...
PHProxy index.php error Parameter XSS
Binary data 2480.prm...
CVE-2004-1213
The CVE-2004-1213 entry concerns an XSS vulnerability in the index.php of Advanced Guestbook versions 2.3.1, 2.2, and potentially other releases. The issue allows remote attackers to inject arbitrary web scripts or HTML via the entry parameter. The description provided with the CVE states the vul...
Brooky CubeCart < 2.0.2 index.php cat_id Parameter SQL Injection
Binary data 2431.prm...
PowerPortal index.php index_page Parameter SQL Injection
Binary data 2409.prm...
miniBB < 1.7f index.php user Parameter SQL Injection
Binary data 2407.prm...