226 matches found
CVE-2007-2803
CVE-2007-2803 describes an SQL injection vulnerability in Vizayn Urun Tanitim Sitesi 0.2 in the default.asp component, exploitable via the id parameter in the haberdetay action, allowing remote execution of arbitrary SQL commands. The connected documents confirm the affected software and vulnerab...
CVE-2006-2803
CVE-2006-2803 describes multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0. The affected component is the PHP ManualMaker application (version 1.0) with input vectors through the index.php id parameter, the search field (possibly the s parameter), or the comment field. The...
CVE-2005-2336
Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...
CVE-2005-2803
CVE-2005-2803 is an XSS vulnerability in Hiki 0.8.1–0.8.2 where the page name used in the Login link is not properly escaped. The issue enables remote attackers to inject arbitrary script/HTML. Other connected sources (JVN/JVNDB/OSV) reference a related Hiki XSS advisory and confirm the same gene...
CVE-2005-2336
Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...
