SQL Injection Vulnerability in Ocean CMS v_field Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admindatarelate.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'vfield' parameter allows attackers to exploit the vulnerability to obtain sensitive database informatio...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 callback parameter in a colorselector action, 2 field parameter in a dateformat action, or 3 companyname parameter in an addedit action to index.php...

CVE-2012-5866

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...

eVision CMS <= 2.0 (field) SQL Injection Vulnerability

No description provided by source. --+++============================================================+++-- --+++====== eVision CMS = 2.0 SQL Injection Vulnerability ======+++-- --+++============================================================+++-- + Author : darkjoker + Site :...

CVE-2004-2324

SQL injection vulnerability in DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the 1 table and 2 field parameters in LinkClick.aspx...