osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - adminproducts_attributes.php?page Cross-Site Scripting

osCommerce 2.2 - adminproductsattributes.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

osCommerce 2.2 - adminstats_products_purchased.php?page Cross-Site Scripting

osCommerce 2.2 - adminstatsproductspurchased.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

CVE-2006-5110

Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-5110

CVE-2006-5110 is a Cross-site scripting (XSS) vulnerability affecting PHP Invoice 2.2, specifically in home.php where the msg parameter can be exploited to inject arbitrary script/HTML. This is noted as a different vector from CVE-2006-5074. The provided sources describe the vulnerability generic...

CVE-2006-5074

CVE-2006-5074 is an XSS vulnerability in the PHP Invoice 2.2 package. The issue resides in home.php, where an attacker can inject arbitrary script/HTML via the alert parameter. Connected documents corroborate that the same vulnerability (and variant vector) appears in related records (e.g., CVE-2...

PHP Invoice 2.2 (Billing and client Management) home.php Xss vuln.

description : ------------- PHP Invoice designed to automate your entire account, order, billing, ticket system needs. From displaying your sales content, to ordering, PHP Invoice will handle all your billing and authentication requirements with speed and ease. No Matter Webmaster, Web Designer,...

PHP Invoice 2.2 - home.php Cross-Site Scripting

PHP Invoice 2.2 - home.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...

KnowledgeBuilder <= 2.2 (visEdit_root) Remote File Include Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + KnowledgeBuilder.v2.2.PHP.NULL-WDYL Remote File Inclusion + +------------------------------------------------------------------- + + Version ...........: KnowledgeBuilder.v2.2.PHP.NULL-WDY...

CVE-2006-4647

PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter...

CVE-2006-4647

PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4601

CVE-2006-4601 describes a SQL injection vulnerability in the PHP script index.php of the product Annuaire 1Two 2.2 . The flaw allows remote attackers to execute arbitrary SQL commands by supplying a malicious value for the parameter id . The NVD entry assigns a base score of 7.5 ( HIGH ) with net...

Sponge News <= 2.2 (sndir) Remote File Include Vulnerability

No description provided by source. ============================================================================================== Sponge News = v2.2 sndir Remote File Inclusion Exploit =============================================================================================== Critical Level :...

Annuaire 1Two 2.2 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...

Annuaire 1Two 2.2 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== Annuaire 1Two 2.2 Remote SQL Injection Exploit ============================================== !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL...

CVE-2006-4448

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...

CVE-2006-4448

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...

CVE-2006-4448

CVE-2006-4448 concerns PHP remote file inclusion in Interact 2.2/2.x when register_globals is on. The vulnerable vectors are (1) CONFIG[BASE_PATH] via admin/autoprompter.php and includes/common.inc.php, and (2) CONFIG[LANGUAGE_CPATH] via admin/autoprompter.php. This allows arbitrary PHP code exec...