CVE-2006-4501

SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 about, 2 album, 3 id, 4 use, 5 desc, 6 doc, 7 mname, 8 max, and possibly other parameters...

CVE-2006-4501

SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 about, 2 album, 3 id, 4 use, 5 desc, 6 doc, 7 mname, 8 max, and possibly other parameters...

CVE-2006-4500

The CVE-2006-4500 entry concerns a Cross-site Scripting (XSS) flaw in ezPortal/ztml CMS 1.0. The vulnerability arises in index.php, where multiple parameters (including about, lastname, email, password, album, id, table, desc, doc, mname, max, htpl, pheader, and possibly others) can be used to in...

CVE-2006-4457

PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4457

The CVE-2006-4457 entry describes a PHP remote file inclusion vulnerability in index.php of phpECard 2.1.4 and earlier. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the include_path parameter. Affected software/version: phpECard 2.1.4 and ear...

Ezportal/Ztml v1.0 Multiple vulnerabilities

:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...

phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities

phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

CVE-2006-4427

Vulnerability summary (CVE-2006-4427) : In eFiction prior to version 2.0.7, remote attackers can bypass authentication and gain privileges by setting the parameters (adminloggedin, loggedin, level) to “1” in index.php. This constitutes a privilege-escalation flaw in the authentication logic. The ...

CVE-2006-4358

Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

CVE-2006-4358

Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...

CVE-2006-4358

CVE-2006-4358 describes a cross-site scripting (XSS) vulnerability in the Diesel Pay product, affecting the code path index.php via the read parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. According to the NVD entry, the CVSS v2 base score is 4.3 (Medi...

CVE-2006-4351

Cross-site scripting XSS vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

DieselPay İndex.php Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com DieselPay ndex.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/index.php?read=XSS...

DieselScripts DieselPay - index.php Cross-Site Scripting

DieselScripts DieselPay - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19623/info DieselPay is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

CVE-2006-4230

Summary: CVE-2006-4230 describes multiple PHP remote file inclusion vulnerabilities in the Lizge V.20 Web Portal. The flaw resides in index.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the (1) lizge or (2) bade parameters. The NVD entry lists a base CVSS v2 ...

CVE-2006-4196

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion

The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...

CVE-2006-4086

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4086

The CVE-2006-4086 entry concerns Elaine Aquino Online Zone Journals (OZJournals) 1.5. The vulnerability is a cross-site scripting (XSS) flaw in index.php where an attacker can inject arbitrary web script or HTML via the keywords parameter. The affected component is OZJournals 1.5’s index.php, wit...