CVE-2004-2735

CVE-2004-2735 describes a Cross-site scripting (XSS) vulnerability affecting P4DB 2.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted input through a long list of parameters across multiple CGI scripts (e.g., SetPreferences.cgi, branchVi...

CVE-2007-2735

CVE-2007-2735 is an SQL injection vulnerability affecting the ResManager 1.2.1 and earlier module for XOOPS. The issue allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter in edit_day.php. CVSSv2 base score 7.5 (HIGH) with network attack vector, no authentication,...

CVE-2006-2735

CVE-2006-2735 is a PHP remote file inclusion vulnerability in Activity MOD Plus (Amod) 1.1.0 (language/lang_english/lang_activity.php) used with phpBB when register_globals is on. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The en...

CVE-2005-2735

CVE-2005-2735 describes a cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier . The flaw allows remote attackers to inject arbitrary web script or HTML via EXIF data (e.g., Camera Model Tag) . Documented impact indicates that the vulnerability can be triggered through crafted...

UserMin Remote Access Detection

Binary data 2735.prm...

CVE-2004-2735

Cross-site scripting XSS vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 SETPREFERENCES parameter in SetPreferences.cgi; 2 BRANCH parameter in branchView.cgi; 3 FSPC and 4 COMPLETE parameters in changeByUsers.cgi; 5 FSPC, 6 LABEL, 7...