109 matches found
CVE-2009-2891
CVE-2009-2891 describes an SQL injection in list.php of PHP Scripts Now Riddles, exploitable via the catid parameter. The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands. Affected component: list.php within the PHP Scripts ...
CVE-2009-2891
creationtimestamp| type| source ---|---|--- 2009-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34903...
CVE-2008-2891
CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...
CVE-2008-2891
creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5878...
CVE-2007-2891
CVE-2007-2891 affects FirmWorX 0.1.2 with multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying crafted URLs via (1) bank_data[root] to modules/bank/includes/design/main.inc.php or (2) fm_data[root] to (a) includes/config/master.inc.ph...
CVE-2006-2891
Pixelpost’s admin/index.php (versions 1-5rc1-2 and earlier) contains a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary HTML or web script through the loginmessage parameter. The vulnerability is described across multiple sources (NVD and related records) with the ...
CVE-2005-2891
WebArchiveX.dll 5.5.0.76 (pre-Sept 6, 2005) exposes a scripting-unsafe default state that allows remote attackers to read or write arbitrary files via the MakeArchive and MakeArchiveStr methods. Affected component is WebArchiveX.dll; vulnerability arises because the component was marked safe for ...
CVE-2005-2891
WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the 1 MakeArchive or 2 MakeArchiveStr methods...
