CVE-2006-0715

Cross-site scripting XSS vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field...

CVE-2006-0716

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

CVE-2006-0715

CVE-2006-0715 concerns an XSS vulnerability in sNews 1.3, where the comment field can be exploited to inject arbitrary web script/HTML. The affected software is sNews 1.3; the vulnerability is a cross-site scripting issue via user-supplied input in comments. The connected sources confirm the desc...

CVE-2006-0716

CVE-2006-0716: A SQL injection vulnerability in sNews 1.3—specifically in index.php—allows remote attackers to inject arbitrary SQL via the category and id parameters. The connected documents confirm the affected software (sNews 1.3) and the vulnerable component (index.php) with the underlying is...

CVE-2006-0715

Cross-site scripting XSS vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field...

CVE-2006-0716

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

Sql injection

Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter...

CVE-2006-0655

Multiple cross-site scripting XSS vulnerabilities in 1 linkedited.php and 2 linkadded.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-0653

CVE-2006-0653 involves SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3, allowing remote attackers to execute arbitrary SQL commands via multiple vectors, including the username parameter. The connected records confirm the affected software and the underlying vulnerability class ...

CVE-2006-0655

CVE-2006-0655 describes multiple cross-site scripting (XSS) vulnerabilities in Hinton Design phpht Topsites 1.3, specifically in the link_edited.php and link_added.php scripts. The provided descriptions indicate remote attackers can inject arbitrary web script or HTML via unspecified vectors. The...

CVE-2006-0654

CVE-2006-0654 affects Hinton Design phpht Topsites 1.3 where check.php fails to validate passwords when cookies are used, enabling remote attackers to bypass authentication via unspecified cookies. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low complexit...

CVE-2006-0614

Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.116 and 1.4.x through 1.4.208 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "first issue."...

[SA18715] PHP GEN Unspecified Cross-Site Scripting and SQL Injection

TITLE: PHP GEN Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA18715 VERIFY ADVISORY: http://secunia.com/advisories/18715/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHP GEN 1.x...

Code injection

PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service ping flood via a negative count parameter...

Sql injection

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403

CVE-2006-0403 affects e-moBLOG 1.3 with multiple SQL injection vulnerabilities exploitable via the (1) monthy parameter to index.php and (2) login parameter to admin/index.php. Remote attackers could execute arbitrary SQL commands. Root cause described as improper handling of user input leading t...

PT-2005-2726 · Oracle +1 · Javamail Api +1

Name of the Vulnerable Software and Affected Versions: JavaMail API versions 1.1.3 through 1.3 Description: The issue allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. It is worth noting that Sun and Apache dispute this issue, with Sun...

Fedora Core 4 : poppler-0.4.3-1.3 (2005-1171)

Several more flaws were discovered in Xpdf, which poppler is based on. An attacker could construct a carefully crafted PDF file that could cause poppler to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to the...

O-Kiraku Nikki 1.3 - Nikki.php SQL Injection

O-Kiraku Nikki 1.3 - Nikki.php SQL Injection source: https://www.securityfocus.com/bid/15657/info O-Kiraku Nikki is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...