CVE-2006-3151

Cross-site scripting XSS vulnerability in index.php in AssoCIateD aka ACID 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter...

CVE-2006-3130

CVE-2006-3130 describes an SQL injection in Clubpage’s index.php via the category parameter. Affected: Clubpage, component: index.php. Root cause: insufficient input validation on the category parameter leading to arbitrary SQL execution. Impact per linked records: data confidentiality, integrity...

CVE-2006-3129

NC LinkList 1.2 and earlier are affected by cross-site scripting in index.php, exploitable via the (1) cat and (2) view parameters. Root cause: insufficient sanitization of user input. Impact: script execution in affected users’ browsers. Affected versions: 1.2 and earlier. CVSS base score: 4.3 (...

CVE-2006-3106

CVE-2006-3106 describes a cross-site scripting (XSS) vulnerability in index.php of phpMyDesktop|Arcade 1.0 . The flaw is triggered by the subsite parameter in the subsite todo feature, enabling remote attackers to inject arbitrary web script or HTML. The public reports indicate an XSS risk with a...

CVE-2006-3105

Technical details about CVE-2006-3105 are not publicly provided in the connected documents. The available sources reproduce the description but do not specify affected products/versions, root cause, or fixes. Monitor for updates.

CVE-2006-3103

CVE-2006-3103 describes a cross-site scripting (XSS) vulnerability in Bitweaver 1.3, allowing remote attackers to inject arbitrary web script or HTML via (1) the error parameter in users/login.php and (2) the feedback parameter in articles/index.php. The connected records confirm Bitweaver as the...

CVE-2006-3088

Cross-site scripting XSS vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the makeid parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3088

The CVE-2006-3088 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Car Classifieds that allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. The vulnerability is triggered through a crafted make_id value, enabling script execution in ...

CVE-2006-3060

Cross-site scripting XSS vulnerability in P.A.I.D 2.2 allows remote attackers to inject arbitrary web script or HTML via the 1 read parameter in index.php, 2 farea parameter in faq.php, and 3 unspecified input fields on the "My Account" login page...

CVE-2006-3062

The CVE-2006-3062 entry concerns a cross-site scripting (XSS) flaw in myPHP Guestbook 2.0.4 and older, exploitable via the lang parameter in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Public references confirm the affected application/version comb...

CVE-2006-3063

The CVE-2006-3063 entry describes multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and prior to 2.0.1 RC5. The flaw allows remote attackers to inject arbitrary script or HTML via user-supplied content in specific parameters across multiple pages: (a) ind...

CVE-2006-3036

Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...

CVE-2006-3038

The CVE-2006-3038 issue affects Cescripts Realty Room Rent (index.php) where XSS is possible through the sel_menu parameter. The underlying flaw is improper sanitization of user input, enabling injection of arbitrary script/HTML. The NVD entry notes the vendor acknowledged the issues and addresse...

myphp202.txt

a xss attack is possible in index.php http://127.0.01/myphp/index.php?lang="alert1337...

CVE-2006-3010

Multiple SQL injection vulnerabilities in Open Business Management OBM 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the 1 neworder and 2 orderdir parameters to a index.php, b group/groupindex.php, c user/userindex.php, d list/listindex.php, and e company/companyindex.php...

CVE-2006-2994

Multiple cross-site scripting XSS vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, 3 url fields, and 4 text field content parameter...

CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2985

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...

CVE-2006-2994

PhazizGuestbook 2.0 is affected by XSS in index.php. The vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML through the (1) name, (2) email, (3) url, and (4) text (content) fields. The description from CVE-2006-2994 is consistent across NVD/NIST references. No concrete...