CVE-2006-1579

The CVE-2006-1579 entry describes a SQL injection in topics.php of Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier, exploitable via the limite parameter to execute arbitrary SQL queries. Affected component: topics.php in DbbS

CVE-2006-1579

SQL injection vulnerability in topics.php in Dynamic Bulletin Board System DbbS 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the limite parameter...

DbbS<=2.0-alpha SQL injection

author: DaBDouB-MoSiKaR Moroccan Security Team site: http://www.dbbs.sup.fr/ greetz to : Moroccan Security Team CiM-TeaM and All Freinds exemple: http://target/topics.php?fid=3&limite=sql inbox:DaBDouB-MoSiKaRatmoroccan-securitydotcom...

CVE-2006-0308

PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter...

CVE-2005-0222

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2subView parameter, which reveals the path in an error message...

CVE-2005-0221

Affected software: Gallery 2.0 Alpha (Gallery login.php). Vulnerability: Cross-site scripting (XSS) via g2_form[subject]. Root cause: user-supplied input in login form is not properly sanitized, allowing injection of arbitrary HTML/script. Impact: remote attacker could exploit to run script in a ...

CVE-2005-0222

The CVE-2005-0222 entry concerns Gallery 2.0 Alpha where main.php exposes sensitive path information via the g2_subView parameter, enabling remote information disclosure. The underlying issue is a lack of proper validation/error handling that reveals the file path in an error message when g2_subV...

CVE-2005-0222

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2subView parameter, which reveals the path in an error message...

CVE-2005-0221

Cross-site scripting XSS vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2formsubject field...

CVE-2005-0221

Cross-site scripting XSS vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2formsubject field...

Invision Power Board (IP.Board) < 2.0 Alpha 3 - SQL Injection (PoC)

IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC, ProblemIsHere DESC LIMIT 0,15 mySQL error: You have an error in you...