68 matches found
CVE-2008-6188
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...
CVE-2008-6188
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...
CVE-2008-6188
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...
CVE-2008-6188
CVE-2008-6188 affects GForge 4.6 rc1 and earlier. The SQL injection exists in people/editprofile.php via the skill_edit[] parameter, enabling remote attackers to inject arbitrary SQL. Connected sources confirm the affected software and input vector; no vendor patch is provided in the documents, s...
CVE-2008-6188
creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6708...
CVE-2007-6188
TuMusika Evolution 1.7R5 is affected by multiple directory traversal flaws enabling remote attackers to include/execute arbitrary local files via ".." in language parameters (languages_n.php, languages_f.php, languages.php in inc/) and to read local files via ".." in the uri parameter to frames/n...
CVE-2006-6188
CVE-2006-6188 is a Cross-site Scripting (XSS) vulnerability in ClickTech Click Gallery (view_search.asp) that can be exploited via the txtKeyWord parameter to inject arbitrary script/HTML. Affected: ClickTech Click Gallery; vulnerable component: view_search.asp. Root cause: improper neutralizatio...
