VihorDesign - index.php Cross-Site Scripting

VihorDesign - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17226/info VihorDesign is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Sql injection

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...

CVE-2006-1360

CVE-2006-1360 describes multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2. Attack via parameters (id, type, show to index.php; message1 or message to cart.php) can allow remote attackers to execute arbitrary SQL commands. The description specifies the vulnerable inputs but does not pr...

CVE-2006-1349

Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...

CVE-2006-1349

Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...

CVE-2006-1348

The CVE-2006-1348 entry relates to gCards (PHP)

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...

CVE-2006-1331

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 method or 2 list parameter...

CVE-2006-1332

Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message...

CVE-2006-1331

CVE-2006-1331 describes multiple cross-site scripting (XSS) vulnerabilities in Noah's Classifieds 1.3 and earlier, exploitable via the index.php parameters (1) method or (2) list. Root cause is inadequate input handling/validation in these parameters, enabling remote attackers to inject arbitrary...

CVE-2005-4732

CVE-2005-4732 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of Tux Bank/TuxRacer 0.7x and 0.8, exploitable via the (1) name and (2) description parameters. Impact is remote script/HTML injection; CVSSv2 base score 4.3 (Medium). Connected documents confirm the issue bu...

CVE-2005-4743

The CVE-2005-4743 vulnerability concerns NeLogic Nephp Publisher 4.5.2 and earlier, where SQL injection is possible in index.php via the parameters (1) id and (2) nnet_catid). The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL comm...

CVE-2006-1271

SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynewscommentid parameter...

Sql injection

Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...

CVE-2006-1259

Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...

XSS in eBoard alpha 3.1

Advisory: eBoard alpha 3.1 Home Page: http://www.edge-programming.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php http://koti.mbnet.fi/stinger/eboard/index.php?a=topic&forum=1&topic=10"scriptalert/script"...

SQL-injection and XSS in photokorn gallery

Advisory: SQL-injection and XSS in photokorn gallery Home Page: http://www.telekorn.com Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: search.php http://www.stockvault.net/gallery/search.php?action=search&type=detail&where=keywords'&keyword=dotted Раскрытие установочно...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prev, 2 next, and 3 rand5 parameters in a index.php; the 4 rusername and 5 rloc parameters in b newtopic.php; the 6 rnum, 7 rfamilyname, 8...

DSCounter 1.2 - index.php SQL Injection

DSCounter 1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...