CVE-2006-2109

CVE-2006-2109 is a documented XSS flaw in JSBoard. The vulnerability exists in parse_query_str() within include/print.php, where CGI query variables are indiscriminately exported as global variables, enabling remote attackers to inject script via parameters (demonstrated with the login.php?table=...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...

CVE-2005-2109

This CVE (CVE-2005-2109) affects WordPress 1.5.1.2 and earlier. The vulnerability arises in wp-login.php where the forgotten-password email content can be altered by remote attackers due to an uninitialized message variable. The impact is that an attacker could modify the email message sent durin...

CVE-2004-2109

CVE-2004-2109 describes multiple cross-site scripting (XSS) vulnerabilities in the Q-Shop application, specifically in the components (1) imagezoom.asp and (2) recommend.asp. The attacker can leverage these flaws to execute arbitrary JavaScript in a victim’s browser and potentially steal the user...

CVE-2004-2109

Multiple cross-site scripting XSS vulnerabilities in 1 imagezoom.asp or 2 recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...