CVE-2007-3963

CVE-2007-3963 covers multiple XSS flaws in UseBB 1.0.7 and possibly other 1.0.x versions. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the PATH_INFO (PHP_SELF) to upgrade-0-2-3.php, upgrade-0-3.php, or upgrade-0-4.php in the install/ directory. The cited entries ...

CVE-2006-3963

Banex PHP MySQL Banner Exchange 2.21 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via user-controlled parameters. Specifically, the site_name parameter to signup.php and the id, deleteuserbanner, viewmem, viewmemunb, viewunmem, and deleteuse...

CVE-2005-3963

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...

CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...