7215 matches found
CVE-2005-4435
CVE-2005-4435 describes a cross-site scripting (XSS) vulnerability in the AbleDesign D-Man 3.x product, occurring in index.php via the title parameter. An attacker could inject arbitrary web script or HTML by supplying a crafted title value. The connected documents confirm the affected component ...
CVE-2005-4435
Cross-site scripting XSS vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4432
CVE-2005-4432 reflects an XSS vulnerability in PlaySMS 0.8, where index.php is vulnerable to script/HTML injection via the err parameter. Affected component: index.php (PlaySMS 0.8). Underlying cause: improper handling of the err parameter enables arbitrary script execution in the victim’s browse...
CVE-2005-4428
Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...
CVE-2005-4428
Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...
CVE-2005-4416
The CVE-2005-4416 issue affects TML CMS 0.5 and is caused by a SQL injection in the index.php file, allowing remote attackers to insert or alter SQL commands via the id parameter . The available sources (NVD/CVE records) report this as a direct vulnerability with the impact of enabling partial co...
CVE-2005-4416
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-4415
CVE-2005-4415 describes a cross-site scripting (XSS) vulnerability in index.php of TML CMS 0.5 , allowing remote attackers to inject arbitrary web script or HTML via the form parameter. The known impact is partial integrity loss and potential user-script execution, with the CVSS base score of 4.3...
CVE-2005-4403
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter...
CVE-2005-4353
The CVE-2005-4353 entry describes an SQL injection in toendaCMS 0.6.2.1 when configured to use a SQL database. The vulnerability occurs in index.php and allows remote attackers to alter or extract data by injecting arbitrary SQL through the id parameter. Affected product: toendaCMS 0.6.2.1 (SQL-e...
PHP Fusebox 3.0 - index.php Cross-Site Scripting
PHP Fusebox 3.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15924/info PHP Fusebox is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...
CVE-2005-4318
CVE-2005-4318 is a SQL injection vulnerability in Limbo CMS 1.0.4.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands through the _SERVER[REMOTE_ADDR] parameter, which alters the underlying $_SERVER variable when register_globals is off. Affected software is Limbo CM...
CVE-2005-4304
index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid catid parameter, which leaks the full pathname in an error message. NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details...
CVE-2005-4308
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter...
CVE-2005-4308
Affected software: ezUpload Pro 2.2 and earlier. Vulnerability: remote attackers can include files via the mode parameter in index.php, enabling possible RFI. Root cause: improper handling of the mode parameter leading to file inclusion. Impact (per CVSS): partial confidentiality, integrity, and ...
CVE-2005-4308
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter...
CVE-2005-4304
CVE-2005-4304 affects ezDatabase versions up to 2.1.2 and earlier. The issue is triggered by an invalid cat_id parameter in index.php, leading to leakage of a full pathname in an error message. The description notes uncertainty about details due to report terminology problems and partial feedback...
CVE-2005-4303
CVE-2005-4303 affects ezDatabase 2.1.2 and earlier via a SQL injection in index.php where the db_id parameter enables remote attackers to execute arbitrary SQL commands. The vulnerability is documented with a High base score (7.5, NETWORK attack, no authentication) and partial impact on confident...