Sql injection

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

CVE-2009-4695

SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4692

Cross-site scripting XSS vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action...

CVE-2009-4696

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4694

RadScripts RadLance Gold 7.5 is affected by CVE-2009-4694: an XSS vulnerability in index.php via the fid parameter in a view_forum action. The vulnerability permits remote script/HTML injection, potentially impacting user sessions. According to NVD, the CVSS2 base score is 4.3 (Medium) with vecto...

CVE-2009-4697

CVE-2009-4697 concerns multiple XSS vulnerabilities in RadNICS Gold 5, specifically in index.php. The affected vectors are the (1) order parameter in a ulist action and (2) the fid parameter in a view_forum action, enabling remote attackers to inject arbitrary script/HTML. The public data consist...

CVE-2009-4694

Cross-site scripting XSS vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a viewforum action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-4697

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

CVE-2009-4695

The CVE-2009-4695 entry describes a SQL injection in RadScripts RadLance Gold 7.5, affecting index.php via the fid parameter in a view_forum action. The underlying issue is a parameter-based SQL command execution vulnerability that could allow remote attackers to alter or read data. The connected...

CVE-2009-4696

RadNICS Gold 5 contains a SQL injection in index.php via the fid parameter in the view_forum action, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2009-4692

CVE-2009-4692 describes a Cross-site Scripting (XSS) vulnerability in RadScripts RadLance Gold 7.5, specifically in index.php where the pr parameter in a ulist action can be exploited to inject arbitrary script or HTML. The vulnerability is tied to a flaw in how user-supplied data is handled in t...

CVE-2009-4695

SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4696

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4694: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a viewforum action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-4692: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action...

CVE-2009-4697: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

CVE-2009-4696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4695: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

Ipswitch WhatsUp Gold Web Server Buffer Overflow (CVE-2004-0798)

WhatsUp is a network management and monitoring application developedby Ipswitch Inc. It has a built-in web server to enable remote accessto the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold parses HTTP requests. A buffer overflow occurs due to...