494 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...
CVE-2006-1891
Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...
CVE-2006-1891
CVE-2006-1891 describes a cross-site scripting (XSS) vulnerability in Martin Scheffler’s betaboard 0.1. The issue allows remote attackers to inject arbitrary script/HTML through a user’s profile, potentially via the FormVal_profile parameter. The description notes uncertainty whether betaboard is...
[eVuln] RedCMS Multiple XSS and SQL Injection Vulnerabilities
New eVuln Advisory: RedCMS Multiple XSS and SQL Injection Vulnerabilities http://evuln.com/vulns/115/summary.html --------------------Summary---------------- eVuln ID: EV0115 CVE: CVE-2006-1568 CVE-2006-1569 Software: RedCMS Sowtware's Web Site: http://redcms.co.uk/ Versions: 0.1 Critical Level:...
Sql injection
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...
CVE-2006-1568
Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...
CVE-2006-1569
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...
CVE-2006-1568
Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...
arabportalXSS.txt
ArabPortal 2.0 Stable .. The Best Arbian Portal & Forums System The Bug Is XSS code online.php?&title=D3vil-0x1CODE download.php?action=byuser&userid=1&title=D3vil-0x1CODE /code center ^^ Secumod 0.1 Anti-XSS & SQL Injection ^^ Get It For Free !! Only 15$ And Update it forever Connect Me By E-Mai...
CVE-2006-1327
SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...
Sql injection
SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...
CVE-2006-1327
SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...
CVE-2006-1327
CVE-2006-1327 describes an SQL injection vulnerability in SoftBB 0.1, exploitable through reg.php via the mail parameter, allowing remote execution of arbitrary SQL commands. Affected component: SoftBB 0.1 (reg.php). Root cause: improper neutralization of user input in the mail parameter leading ...
SoftBB 0.1 - 'mail' Blind SQL Injection
!/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT pseudo,mail FROM '.$prefixtable.'membres...
CVE-2006-1081
SQL injection vulnerability in forgottenpassword.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter...
CVE-2006-1081
CVE-2006-1081 affects PluggedOut Nexus 0.1 by Jonathan Beckett. The vulnerability is a SQL injection in forgotten_password.php triggered via the email parameter, enabling remote attackers to execute arbitrary SQL commands. The available connected sources confirm the affected component and root ca...
CVE-2005-4056
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 Location, 2 Last Name, and 3 First Name parameters...
CVE-2005-4057
CVE-2005-4057 describes a Cross-site scripting (XSS) vulnerability in the PluggedOut Nexus 0.1 project, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the (1) Location, (2) Last Name, and (3) First Name parameters. The entries ...