1702 matches found
CVE-2006-2858
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
CVE-2006-2858
The vulnerability CVE-2006-2858 affects LocazoList Classifieds 1.05e, with the issue located in viewmsg.asp. The underlying flaw is an SQL injection via the msgid parameter that allows remote attackers to execute arbitrary SQL commands. The available sources confirm the presence of this SQL injec...
CVE-2006-2858
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
CVE-2006-2858: Undefined Security Weakness
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
locazolist.txt
Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...
LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability
Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...
Cross site scripting
Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2006-1970
Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2006-1970
CVE-2006-1970 denotes a cross-site scripting (XSS) vulnerability in the classifieds/viewcat.cgi component of KCScripts Classifieds, distributed standalone and as part of Portal Pack 6.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter....
CVE-2006-1970
Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2006-1970: Undefined Security Weakness
Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...
CVE-2006-1532
CVE-2006-1532 is a cross-site scripting (XSS) vulnerability in the PHP Classifieds product, affecting versions 6.18 and 6.20 (and possibly other versions). The flaw resides in the search.php handler where the searchword parameter can be exploited by remote attackers to inject arbitrary web script...
CVE-2006-1532
Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...
CVE-2006-1532: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...
Design/Logic Flaw
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...
CVE-2006-1332
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...
CVE-2006-1332
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...
CVE-2006-1332
CVE-2006-1332 concerns Noah’s Classifieds 1.3 and earlier where a flaw in the showdetails method (index.php) allows remote attackers to obtain sensitive information by supplying an invalid list parameter, causing an error message to disclose the path. The incident affects the product’s ability to...