Sql injection

SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-0827

SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-0827

CVE-2008-0827 affects the PHP-Nuke framework, specifically the Books module. The vulnerability is a SQL injection in the cid parameter that allows remote attackers to execute arbitrary SQL commands against the backend database. This is documented across multiple sources (NVD/NVD entry, CVE record...

CVE-2008-0827

SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Unfixed XSS vulnerability at www.sussexunibooks.co.uk

Security researcher By Encore, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting www.sussexunibooks.co.uk, which at the time of submission ranked 1138086 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. I...

Unfixed XSS vulnerability at www.christianlibertybooks.co.za

Security researcher SCRiPToRiuM, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.christianlibertybooks.co.za, which at the time of submission ranked 6489263 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.books-in-greek.gr

Security researcher St@R-gaZ3r, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting www.books-in-greek.gr, which at the time of submission ranked 500284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/11/2007. It i...

[SECURITY] Fedora Core 5 Update: squirrelmail-1.4.8-3.fc5

SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure...

CVE-2006-6286

Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information address books, calendar files, and todo lists of other users via unspecified vectors. NOTE: The provenance of this information is unknown...

The Books Module for the PostNuke CMS XSS Vulnerability

---------------------------------------------------- Class : input Validation Error Risk : Due to the simplicity of the attack and the number of sites that run module books the risk is classified as Medium to High. URL: Http://pn-mod-books.sourceforge.net -...

Michael Schatz Books 0.540.6 PostNuke Module - Cross-Site Scripting

Michael Schatz Books 0.540.6 PostNuke Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/5882/info Books is a module written for PostNuke. Reportedly, Books is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follo...

Adobe eBook Reader 2.2 - File Restoration Privilege Escalation

Adobe eBook Reader 2.2 - File Restoration Privilege Escalation source: https://www.securityfocus.com/bid/5273/info Adobe eBook Reader is a client side application which is able to view Adobe eBooks, available for Microsoft Windows and Macintosh OS 9. eBooks are electronic books which provide some...