7215 matches found
CVE-2005-4628
Technical details about CVE-2005-4628 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected product versions, impact, and remediation information.
CVE-2005-4630
CVE-2005-4630 affects ClientExec 2.3. It is a SQL injection vulnerability in index.php that allows remote attackers to execute arbitrary SQL commands via the parameters (billshowid, billdetailid, fuse, frmClientID). The issue enables manipulation of backend queries and can lead to data exposure o...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
Cross site scripting
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0111
The CVE-2006-0111 entry describes a Cross-site scripting (XSS) vulnerability in the Boxcar Media Shopping Cart, specifically in index.php. The affected component is the index.php handler, with the vulnerability exploitable via the (1) parent and (2) pg URL parameters. Attackers can inject arbitra...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2006-0101
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2005-4627
CVE-2005-4627 is a cross-site scripting (XSS) vulnerability described for index.php affecting GmailSite 1.0–1.0.4 and GFHost 0.1.1–0.4.2. The issue allows remote attackers to inject arbitrary web script or HTML via the lng parameter, impacting confidentiality/ integrity of affected sessions as pe...
CVE-2006-0101
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2006-0093
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0093
Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-0090
CVE-2006-0090 describes a directory traversal vulnerability in IDV Directory Viewer (index.php) prior to 2005.1. An attacker can exploit the vulnerability by supplying a "dir" parameter containing ".." to view arbitrary directory contents. The connected documents confirm the affected product and ...
CVE-2006-0093
CVE-2006-0093 describes a Cross-site Scripting (XSS) vulnerability in index.php of @Card ME PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter. According to the NVD entry, the flaw has a CVSS v2 base score of 4.3 (Medium) with network access and no...
CVE-2006-0086
Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2005-4616
SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the includefile parameter...
CVE-2005-4616
CVE-2005-4616 concerns an SQL injection in index.php of iSupport 1.06 via the include_file parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability (as per the provided CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, ...
CVE-2005-4609
The CVE describes a vulnerability in BugPort, affecting index.php in version 1.147 and earlier. The underlying issue is that an invalid action parameter allows remote attackers to disclose sensitive information, including full path and system configuration. The available records do not specify af...