CVE-2006-2031

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-2031

CVE-2006-2031 (and related entries) documents a cross-site scripting (XSS) flaw in phpMyAdmin 2.8.0.x branches. The vulnerability allows injection of arbitrary script/HTML via the lang parameter (and related theme parameter references in other sources). Affected products include phpMyAdmin 2.8.0....

Sql injection

Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by som...

CVE-2006-2001

CVE-2006-2001 affects Scry Gallery 1.1, with a cross-site scripting (XSS) flaw in index.php exploitable via the p parameter. The vulnerability’s CVSS v2 vector (AV:N/AC:M/Au:N/C:N/I:P/A:N) yields a base score of 4.3 (Medium). Impact is limited to partial integrity risk; confidentiality and availa...

CVE-2006-1995

CVE-2006-1995 affects Scry Gallery 1.1. The vulnerability is a directory traversal in index.php, exploitable via the p parameter containing .. sequences. The root cause is improper sanitization due to an rtrim function call with arguments in the wrong order. Documents provided do not include spec...

[Full-disclosure] Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability.

--Security Report-- Advisory: Clansys = 1.1 PHP Code Insertion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 23/04/06 21:07 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Clansys http://www.clansys.de.vu/ Versio...

Clansys 1.1 - index.php PHP Code Insertion

Clansys 1.1 - index.php PHP Code Insertion NukedX Security Advisory Nr 2006-29 ClanSys v1.1 index.php page PHP Code Insertion Vulnerability Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory:...

Sql injection

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

CVE-2006-1974: SQL injection in MyBB (MyBulletinBoard) index.php via the referrer parameter, affecting versions before 1.04. Exploitation could allow remote SQL commands with partial confidentiality and integrity impact. Fix: upgrade to 1.04 or later; apply vendor patches as available. If details...

CVE-2005-4787

Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2005-4787 via endpoints that execute PHP’s phpinfo() (index.php, admin/index.php, admin/adminindex.php), potentially exposing sensitive information. The root cause is the direct invocation of phpinfo() in these pages, enabling information...

Directory traversal

Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ modified dot dot slash in the file parameter, which causes a regular expression to collapse the sequences into standard "../" sequences...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

CVE-2006-1918

CVE-2006-1918 affects Papoo 2.1.5. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the menuid parameter in index.php or forum.php, and the reporeid_print parameter in print.php. The root cause is improper sanitization of input leading to script/HTML injection. Docum...

CVE-2006-1909

The CVE-2006-1909 vulnerability affects Coppermine Photo Gallery, specifically index.php in version 1.4.4. It allows Local File Inclusion/Directory Traversal through the file parameter using patterns like .//./, collapsing to ../ and enabling reading arbitrary local files and potentially executin...

CVE-2006-1918

Multiple cross-site scripting XSS vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to 1 index.php or 2 forum.php, or the 3 reporeidprint parameter to print.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1904

CVE-2006-1904 is a cross-site scripting (XSS) vulnerability reported in the AnimeGenesis Gallery project, affecting the file index.php. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating the cat parameter. Public references include NVD entry with the XSS desc...

CVE-2006-1878

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twgalbum parameter...