CVE-2009-2785: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2009-2110: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

The CVE-2008-6081 entry describes an SQL injection vulnerability in Simple Customer 1.2, specifically in contact.php, where the id parameter can be manipulated by an attacker to execute arbitrary SQL commands. Affects Simple Customer 1.2 (contact.php) with user-controlled id input; impact per NVD...

CVE-2008-6081: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4120: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 pass parameter to login.php, or the 3 name parameter to contact.php...

Unfixed XSS vulnerability at www.cyreas.com

Security researcher PHPLizardo, has submitted on 07/08/2008 a cross-site-scripting XSS vulnerability affecting www.cyreas.com, which at the time of submission ranked 4171291 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

Unfixed XSS vulnerability at www.halfpintmusic.com

Security researcher mckt, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.halfpintmusic.com, which at the time of submission ranked 3749688 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

CVE-2008-2690

Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter to 1 kb.php, 2 login.php, 3 index.php, 4 contactview.php, and 5 contact.php in pub/, different...

Unfixed XSS vulnerability at www.michelberetti.net

Security researcher xylitol, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.michelberetti.net, which at the time of submission ranked 23393639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/04/2010. It is...

CVE-2008-2394

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to contact.php and the 2 nid parameter to news.php...

CVE-2008-2394

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to contact.php and the 2 nid parameter to news.php...

CVE-2008-2394

CVE-2008-2394 affects TAGWORX.CMS 3.00.02. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) cid in contact.php and (2) nid in news.php. This is documented across multiple sources (NVD, CV...

CVE-2008-2394: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to contact.php and the 2 nid parameter to news.php...

TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/ Vuln:...

tagworx-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/ Vuln: -contact.php:...

TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities ========================================================= :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$...

TAGWORX.CMS 3.00.02 - Multiple SQL Injections

TAGWORX.CMS 3.00.02 - Multiple SQL Injections :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu TAGWORX.CMS Remote SQL Injection Vulnerability Script site: http://www.tagworx.net/...

Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Simple Customer 1.2 contact.php id SQL Injection Vulnerability ================================================================...