Noahs Classifieds <= 1.3 (lowerTemplate) Remote Code Execution

Exploit for unknown platform in category web applications ============================================================== Noahs Classifieds Noahs classifieds 1.3 Remote Code Execution Noahs classifieds 1.3 Remote Code Execution by trueend5 Computer Security Researchers Institute KAPDA table...

Sql injection

Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

Sql injection

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

CVE-2006-0757

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

CVE-2006-0759

Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

Cross site scripting

Cross-site scripting XSS vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field...

CVE-2006-0715

Cross-site scripting XSS vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field...

CVE-2006-0716

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

Sql injection

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

CVE-2006-0715

CVE-2006-0715 concerns an XSS vulnerability in sNews 1.3, where the comment field can be exploited to inject arbitrary web script/HTML. The affected software is sNews 1.3; the vulnerability is a cross-site scripting issue via user-supplied input in comments. The connected sources confirm the desc...

CVE-2006-0715

Cross-site scripting XSS vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field...

CVE-2006-0716

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

CVE-2006-0716

CVE-2006-0716: A SQL injection vulnerability in sNews 1.3—specifically in index.php—allows remote attackers to inject arbitrary SQL via the category and id parameters. The connected documents confirm the affected software (sNews 1.3) and the vulnerable component (index.php) with the underlying is...

Sql injection

Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter...

CVE-2006-0655

Multiple cross-site scripting XSS vulnerabilities in 1 linkedited.php and 2 linkadded.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-0653

CVE-2006-0653 involves SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3, allowing remote attackers to execute arbitrary SQL commands via multiple vectors, including the username parameter. The connected records confirm the affected software and the underlying vulnerability class ...

CVE-2006-0654

CVE-2006-0654 affects Hinton Design phpht Topsites 1.3 where check.php fails to validate passwords when cookies are used, enabling remote attackers to bypass authentication via unspecified cookies. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low complexit...

CVE-2006-0655

CVE-2006-0655 describes multiple cross-site scripting (XSS) vulnerabilities in Hinton Design phpht Topsites 1.3, specifically in the link_edited.php and link_added.php scripts. The provided descriptions indicate remote attackers can inject arbitrary web script or HTML via unspecified vectors. The...

CVE-2006-0614

Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.116 and 1.4.x through 1.4.208 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "first issue."...

[SA18715] PHP GEN Unspecified Cross-Site Scripting and SQL Injection

TITLE: PHP GEN Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA18715 VERIFY ADVISORY: http://secunia.com/advisories/18715/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHP GEN 1.x...