PT-2007-3098 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress version 2.1.2 Description: A cross-site scripting XSS issue exists, potentially allowing remote authenticated administrators to inject arbitrary web script or HTML. The issue is related to the demo parameter in the wp-admin/admin.ph...

Authentication flaw

admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie...

CVE-2005-2397: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter...

NETonE PHPBook 1.4.6 - Guestbook.php Cross-Site Scripting

NETonE PHPBook 1.4.6 - Guestbook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14390/info NETonE PHPBook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input to the 'admin' parameter of the 'guestbook.php'...

CVE-2001-1524

Cross-site scripting XSS vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 uname parameter in user.php, 2 ttitle, letter and file parameters in modules.php, 3 subject, story and storyext parameters in submit.php, 4 upload paramete...

CVE-2004-1847: Undefined Security Weakness

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWSLOGIN cookie...