CVE-2010-4922: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...

PT-2011-1857

Name of the Vulnerable Software and Affected Versions Allinta CMS version 22.07.2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via the i parameter in an edit action to API endpoints such as...

PT-2010-5601

Name of the Vulnerable Software and Affected Versions FeedList plugin version 2.61.01 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the i parameter in the feedlist/handler image.php file. Recommendations For FeedList plugin version...

CVE-2010-4637: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feedlist/handlerimage.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2009-4497

Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...

CVE-2009-4497: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...

CVE-2009-3665: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 i parameter or 2 v parameters in a register action...

CVE-2008-2091: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-0289: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in viewfunc.php in Member Area System MAS 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the se...

CVE-2007-0753

Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...

CVE-2007-0753: Use of Externally-Controlled Format String

Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...

CVE-2006-1377

The CVE-2006-1377 entry describes a Cross-site scripting (XSS) vulnerability in img.php for the applications EasyMoblog 0.5.1 and CoMoblog 1.1 , where an attacker can inject arbitrary web script or HTML via the i parameter. The vulnerability is triggered remotely and the impact stated is that the...

CVE-2006-1377: Undefined Security Weakness

Cross-site scripting XSS vulnerability in img.php in 1 EasyMoblog 0.5.1 and 2 CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2005-3845: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this...

CVE-2005-3790: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in actnewsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 i and 2 text parameters...