Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 rep parameter to a index.php or b diapo.php or 2 image parameter to c affich.php. NOTE: item 1a might be resultant from directory traversal...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function...

CVE-2006-2368

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-2368

CVE-2006-2368 is an XSS vulnerability in Clansys (aka Clanpage System) 1.1, exploitable via the page parameter in index.php. The vulnerability permits remote attackers to inject arbitrary script/HTML. From the supplied sources (NVD/NIST), the attack vector is network-based with no authentication,...

CVE-2006-2367

CVE-2006-2367 is a cross-site scripting (XSS) vulnerability in Clansys (Clanpage System) versions 1.0 and 1.1. The flaw resides in index.php where the search function passes a user-controlled func parameter, enabling remote attackers to inject arbitrary web script or HTML. The published entries c...

Limbo weblinks.html.php catid Parameter SQL Injection

The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...

CVE-2006-2339

CVE-2006-2339 affects evoTopsites 2.x and evoTopsites Pro 2.x. The vulnerability is an SQL injection in index.php exploitable via the cat_id and id parameters, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected components and the underlying c...

CVE-2006-2325

Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2006-2326

Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2006-2325

CVE-2006-2325 describes a cross-site scripting (XSS) vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. It allows remote attackers to inject arbitrary web script or HTML via the read parameter, with the note that the issue might originate from directory trav...

Cross site scripting

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2262

Cross-site scripting XSS vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter...

CVE-2006-2257

Cross-site scripting XSS vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web script or HTML via the curryear parameter...

CVE-2006-2257

CVE-2006-2257 is an XSS vulnerability affecting easyEvent 1.2, disclosed for index.php via the curr_year parameter. The underlying issue is improper handling of user-supplied input leading to script/HTML injection. Affected component: index.php in easyEvent 1.2. Impact per sources is partial conf...

CVE-2006-2262

The CVE-2006-2262 entry documents a Cross-site scripting (XSS) vulnerability in the file index.php of the Singapore 0.9.7 project. The vulnerability is triggered via the image parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the description, this affects S...

singapore v0.9.7 XSS Vulnerabilities

SOFTWARE: ========= singapore v0.9.7 DESCRIPTION: ============ The system is vulnerable to various XSS attacks google dork : "Powered by singapore v0.9.7" inurl:index.php?gallery 429 results : xss code example ================ www.site.com/images/index.php?gallery=gallery...