OpenLD 1.2.2 - index.php?id SQL Injection

OpenLD 1.2.2 - index.php?id SQL Injection --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody...

DBImageGallery 1.2.2 - 'donsimg_base_path' Remote File Inclusion

DBImageGallery 1.2.2 Found by Denven Script: http://www.dbscripts.net/download/?file=1 ERROR: admin/attributes.php requireonce $donsimgbasepath admin/images.php requireonce $donsimgbasepath admin/scan.php requireonce $donsimgbasepath includes/attributes.php requireonce $donsimgbasepath...

DBImageGallery 1.2.2 - donsimg_base_path Remote File Inclusion

DBImageGallery 1.2.2 - donsimgbasepath Remote File Inclusion DBImageGallery 1.2.2 Found by Denven Script: http://www.dbscripts.net/download/?file=1 ERROR: admin/attributes.php requireonce $donsimgbasepath admin/images.php requireonce $donsimgbasepath admin/scan.php requireonce $donsimgbasepath...

CVE-2007-0622

Cross-site request forgery CSRF vulnerability in MyBB aka MyBulletinBoard 1.2.2 allows remote attackers to send messages to arbitrary users. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0622

CVE-2007-0622 is a CSRF vulnerability reported in MyBB (aka MyBulletinBoard) 1.2.2 that allows remote attackers to cause a user to send messages to arbitrary recipients. The description specifies cross-site request forgery as the issue and notes the provenance comes from third‑party information; ...

CVE-2006-6778

CVE-2006-6778 is an XSS vulnerability in TimberWolf 1.2.2, exposed via shownews.php and the nid parameter. The affected component is the shownews.php endpoint of TimberWolf 1.2.2, allowing remote attackers to inject arbitrary web script or HTML. The CVSS data from NVD indicates AV:N/AC:M/Au:N/C:P...

timberwolf122-xss.txt

-=--------------------ADVISORY-------------------=- TimberWolf 1.2.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: TimberWolf -=+ Version: 1.2.2 -=+ Vendor's URL: http://cms.gamezrule.org/index.php -=+ Platform: Windows\Linux\Unix -=+ Bug...

CVE-2006-6778

Cross-site scripting XSS vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

PT-2006-5739 · Joomla · Joomlalib

Name of the Vulnerable Software and Affected Versions: JoomlaLib com joomlalib versions prior to 1.2.2 Description: The issue is related to "Joomla globals hacked by script kiddies" and allows remote attackers to have an unknown impact. Recommendations: For versions prior to 1.2.2, update to...

Information disclosure

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

Sql injection

SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Directory traversal

Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure...

CVE-2006-2903

Cross-site scripting XSS vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2006-2902

Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure...

CVE-2006-2905

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

CVE-2006-2905

Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 pagefooter.php and 2 pageheader.php, which displays the path in an error message...

CVE-2006-2903

CVE-2006-2903 describes a cross-site scripting (XSS) vulnerability in Particle Links 1.2.2, specifically in admin.php where the username parameter can be exploited to inject arbitrary script/HTML. The available references (e.g., NVD entry) list a low severity (CVSS v2 base 2.6) with network attac...

CVE-2006-2905

Partial Links 1.2.2 is affected. Remote attackers can disclose sensitive information by requesting page_footer.php or page_header.php, which reveals the path in an error message. The provided documents do not specify a fix or workaround.

CVE-2006-2904

The CVE-2006-2904 entry describes an SQL injection vulnerability in Partial Links 1.2.2, specifically in index.php and exploitable via the topic parameter. The underlying issue is improper input handling that allows an attacker to inject and execute arbitrary SQL commands on the backend database....