CVE-2012-1787: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...

PT-2012-3538

Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component. Recommendations For Webglimpse versions 2.20.0 a...

MediaInSpot CMS - SQL Injection

Exploit Title: Media In Spot SQL Injection Google Dork: intext:""Powered By Media In Spot" Date: 16/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.mediainspot.com/ Note: domain parameter is vulnerable to sql injection Vulnerability...

Sql injection

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2010-1271

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2010-1271: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2009-4233: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/modyjwhois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...

CVE-2008-6297

Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...

CVE-2008-6297: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...

DEBIAN-CVE-2008-3746

neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service NULL pointer dereference and crash via vectors related to Digest authentication, Digest domain parameter support, and the parsedomain function...

Null pointer dereference

neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service NULL pointer dereference and crash via vectors related to Digest authentication, Digest domain parameter support, and the parsedomain function...

CVE-2008-3746

CVE-2008-3746 - neon vulnerability details (supported by connected docs) Affected software: neon 0.28.0 through 0.28.2. The issue is described across multiple advisories as a denial of service caused by a NULL pointer dereference in the digest authentication code, related to Digest authentication...

CVE-2008-3746

neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service NULL pointer dereference and crash via vectors related to Digest authentication, Digest domain parameter support, and the parsedomain function...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

CVE-2008-1243

Cross-site scripting XSS vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndnsdomain parameter to the default URI...

CVE-2008-1041

Cross-site scripting XSS vulnerability in mwhois.php in Matt Wilson Matt's Whois MWhois allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

CVE-2008-1041: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mwhois.php in Matt Wilson Matt's Whois MWhois allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

Design/Logic Flaw

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...

CVE-2007-4079: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...