88 matches found
CVE-2006-4069: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...
CVE-2006-1638
Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter to a accounts.php, b changep.php, c editac.php, d feedback.php, e fpass.php, f login.php, g post.php, h reply.php, or i replylog.php; 2 p parameter to j...
CVE-2005-4674: Undefined Security Weakness
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...
CVE-2005-4675: Undefined Security Weakness
Cross-site scripting XSS vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter...
CVE-2004-2524: Undefined Security Weakness
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...
CVE-2005-2788: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...
CVE-2005-2674: Undefined Security Weakness
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
CVE-2000-0545: Undefined Security Weakness
Buffer overflow in mailx mail command aka Mail on Linux systems allows local users to gain privileges via a long -c carbon copy parameter...