CVE-2007-2416

SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter...

CVE-2007-2416: Undefined Security Weakness

SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter...

CVE-2007-1920: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...

CVE-2006-5110: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-5124: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 target and 2 action parameters in window.php, and possibly the 3 target parameter in home.php...

CVE-2006-5074

Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter...

CVE-2006-5074: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter...

PHP Invoice 2.2 (Billing and client Management) home.php Xss vuln.

description : ------------- PHP Invoice designed to automate your entire account, order, billing, ticket system needs. From displaying your sales content, to ordering, PHP Invoice will handle all your billing and authentication requirements with speed and ease. No Matter Webmaster, Web Designer,...

PHP Invoice 2.2 - 'home.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting use...

CVE-2006-4978: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the univers parameter in score.php and 2 the quizid parameter in home.php, accessed through the front/ URI...

phpQuiz 0.1.2 - SQL Injection / Code Execution

Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...

CVE-2006-4441: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter to 1 home.php or 2 impressum.php. NOTE: the provenance of this information is unknown; the details ar...

CVE-2005-4641

SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2005-4641: Undefined Security Weakness

SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2005-4598: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-4387

Cross-site scripting XSS vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-4387: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-4195: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the ParentId parameter in SPT--BrowseResources.php, 2 ResourceId parameter in SPT--FullRecord.php, 3 ResourceOffset parameter in SPT--Home.php, and 4...

CVE-2005-1822: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to help.php, 7 mode...

CVE-2005-1823: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 printable parameter to home.php, 3 productid or 4 mode parameter to product.php, 5 id parameter to errormessage.php, 6 section parameter to...