CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

CVE-2006-2786

CVE-2006-2786 is an HTTP response smuggling vulnerability affecting Mozilla Firefox and Thunderbird prior to 1.5.0.4. According to connected advisories, an attacker could craft responses that a proxy or header formatting could fool the client into treating as responses from two different sites, p...

CVE-2006-2663

Multiple cross-site scripting XSS vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to 1 accverify.php or 2 project.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to 1 accverify.php or 2 project.php...

Cross site scripting

Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...

CVE-2006-2673

Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...

CVE-2006-2673

CVE-2006-2673 is an XSS vulnerability in Bulletin Board Elite-Board (E-Board) 1.1, residing in search.html and exploitable via the search box to inject arbitrary script/HTML. The connected documents confirm affected component (search.html) and version (E-Board 1.1); root cause details beyond gene...

Sql injection

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchthis parameter in lostid.php and 2 id parameter in stats.php. NOTE: the provenance of this information is unknown; portions of the...

Sql injection

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php...

CVE-2006-2544

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchthis parameter in lostid.php and 2 id parameter in stats.php. NOTE: the provenance of this information is unknown; portions of the...

CVE-2006-2544

CVE-2006-2544 affects Xtreme Topsites 1.1 with magic_quotes_gpc disabled, allowing remote attackers to trigger SQL injection through two parameters: searchthis in lostid.php and id in stats.php. The vulnerability enables arbitrary SQL execution and has a NVD base score of 5.1 (Medium) with networ...

CVE-2006-2545

CVE-2006-2545 affects Xtreme Topsites 1.1. The vulnerability is described as multiple cross-site scripting (XSS) flaws accessible via the id parameter in stats.php and via unspecified inputs in lostid.php (likely the searchthis parameter), with one or more vectors possibly stemming from SQL injec...

powerInclude.txt

Vendor: Power-Place www.power-place.net PHP Easy Galerie 1.1 ------------------------------------------------- Author:Craziest Contact: craziestatgmaildotcom Vuln discovered by BrEakerS -------------------------------------------------- Method:An attacker can exploit this issue to include an...

Sql injection

SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2006-2239

SQL injection vulnerability (CVE-2006-2239) in Newsadmin 1.1 affects readarticle.php via the nid parameter, enabling remote execution of arbitrary SQL commands. This is evidenced in the NVD/NVD-derived entry and corroborated by multiple references in the connected data. No remediation steps or pa...

CVE-2006-2239

SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Creative Software UK Community Portal 1.1 - 'PollResults.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - Discussions.php?forum_id SQL Injection

Creative Software UK Community Portal 1.1 - Discussions.php?forumid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...