9971 matches found
CVE-2006-3049
The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...
CVE-2006-3049: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...
mole.com.ua Ticket Booking Script - XSS
Ticket Booking Script Homepage: http://www.mole.com.ua Effected files: input boxes on booking2.php XSS Vulnerabilities: The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL...
mole.com.ua Booking Script
Booking Script. Homepage: http://www.mole.com.ua PError with full path disclosure and possible buffer overflow?: http://www.example.com/week.php?year=2006&month=06&day=0' Warning: checkdate expects parameter 2 to be long, string given in...
Sql injection
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
CVE-2006-1422
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
CVE-2006-1422
CVE-2006-1422 affects PHP Booking Calendar 1.0c and earlier. The vulnerability is an SQL injection in details_view.php via the event_id parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with network access, low attac...
CVE-2006-1422
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
CVE-2006-1422: Undefined Security Weakness
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...