44 matches found
CVE-2006-6088: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 n or 2 d parameter in igallery.asp, or 3 an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, i...
CVE-2006-3822: Undefined Security Weakness
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter...
CVE-2006-3021: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 n and 2 d parameters in a login.asp and the d parameter in b igallery.asp...
CVE-2006-2425: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 f, 2 d, and 3 ref parameters, and the 4 "MAKE DIR" and 5 "Full file name" fields...