CVE-2010-4357

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...

CVE-2008-4357

SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4357

CVE-2008-4357 concerns a SQL injection in linkto.php of Powie pLink 2.07, exploitable via the id parameter. Affected software: Powie pLink 2.07 (linkto.php). Root cause: unsanitized input leading to arbitrary SQL execution by remote attackers. Impact: potential disclosure, modification, or destru...

CVE-2008-4357

SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4357

Mozilla Firefox 2.0.0.6 and earlier is affected by a vulnerability where a link using a data: URI containing an encoded URL can spoof the contents of the status bar. The issue relies on the status bar’s ability to be modified, and exploitation is possible remotely via crafted links. The literatur...

CVE-2006-4357

The CVE-2006-4357 entry describes a PHP remote file inclusion vulnerability in Diesel Smart Traffic, specifically in clients/index.php where an attacker can supply a URL in the src parameter to execute arbitrary PHP code on the server. Affected component: Diesel Smart Traffic (PHP), vulnerable co...

Cross site scripting

Cross-site scripting XSS vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' single quote characters and active attributes such as onmouseover, a variant of CVE-2005-4357...

CVE-2005-4357

Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...

CVE-2005-4357

CVE-2005-4357 is a cross-site scripting (XSS) vulnerability in phpBB when the “Allowed HTML tags” feature is enabled. The issue allows remote attackers to inject arbitrary JavaScript via a permitted HTML tag that includes characters like " and active attributes such as onmouseover, effectively ex...