753 matches found
CVE-2006-1815
CVE-2006-1815 affects Tritanium Bulletin Board (TBB) 1.2.3: register.php is vulnerable to reflected XSS via the newuser_realname and newuser_icq parameters in the faction=register flow (index.php), allowing remote script/HTML injection. This vector is distinct from CVE-2006-1768. Root cause cited...
CVE-2006-1768
CVE-2006-1768 affects Tritanium Bulletin Board (TBB) 1.2.3. The vulnerability is an XSS flaw in register.php where the attacker can inject arbitrary script/HTML via the (1) newuser_name, (2) newuser_email, or (3) newuser_hp parameters in the faction=register mode of index.php. The associated conn...
Sql injection
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the affnewsform parameter, a different vulnerability than CVE-2005-1509...
CVE-2006-0943
The CVE-2006-0943 issue affects PwsPHP 1.2.3, specifically the sondages module’s index.php. The underlying vulnerability is a SQL injection via the id parameter to index.php, enabling remote attackers to execute arbitrary SQL commands. The available connected records corroborate the same descript...
CVE-2006-0943
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2006-0724
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are not...
CVE-2006-0668
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espacemembre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Sql injection
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espacemembre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2006-0668
CVE-2006-0668 describes an SQL injection in the PHP application PwsPHP 1.2.3, specifically via the id parameter in index.php (and possibly in message.php within the espace_membre module). The underlying issue is a lack of input validation/safe query construction, enabling remote attackers to exec...
PwsPHP 1.2.3 - SQL Injection
PwsPHP 1.2.3 - SQL Injection source: https://www.securityfocus.com/bid/16567/info PwsPHP is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an...
PwsPHP 1.2.3 - SQL Injection
source: https://www.securityfocus.com/bid/16567/info PwsPHP is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...
Path traversal
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0590
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0590
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0589
MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks the path in an error message...
CVE-2006-0588
Affected software: MyTopix 1.2.3. The vulnerability is in search.php and is caused by an SQL injection via the mid and keywords parameters, enabling remote attackers to execute arbitrary SQL commands. Consequences include potential partial confidentiality, integrity, and availability impact as in...
CVE-2006-0589
CVE-2006-0589 affects MyTopix 1.2.3. The vulnerability allows remote attackers to obtain the installation path by making a direct request to logon.mod.php, which leaks the path in an error message. No explicit exploit code or in-the-wild details are provided in the documents beyond this. The conn...
kapda-26.txt
KAPDA New advisory Vendor: http://www.jaia-interactive.com Vulnerable: Version: 1.2.3 Bug: Sql Injection & Path Disclosure Exploitation: Remote with browser Description: -------------------- MyTopix is a PHP-based message board system that uses a MySQL database. Vulnerability: -------------------...
[SA17859] SAPID CMS Security Bypass Vulnerability
TITLE: SAPID CMS Security Bypass Vulnerability SECUNIA ADVISORY ID: SA17859 VERIFY ADVISORY: http://secunia.com/advisories/17859/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SAPID CMS 1.x http://secunia.com/product/6323/ DESCRIPTION: A vulnerability has been...
CVE-2005-3963
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...