CVE-2005-3930

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3930

The CVE-2005-3930 entry concerns N-13 News 1.2 where a vulnerability in index.php allows SQL injection through the id parameter. The underlying issue enables remote attackers to execute arbitrary SQL commands (as described in the initial record). The available documents do not specify affected ve...

CVE-2005-3956

DMANews 0.904 and 0.910 are affected by multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to inject arbitrary SQL commands through (1) the id parameter in a comments action and (2) the sortorder and (3) display_num parameters in a news_list action. The provided...

CVE-2005-3958

The CVE-2005-3958 entry identifies a SQL injection vulnerability in Entergal MX 2.0, specific to index.php via the (1) idcat parameter in a showcat action and (2) the action parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the web i...

CVE-2005-3956

Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a comments action and the 2 sortorder and 3 displaynum parameters in a newslist action...

CVE-2005-3954

Cross-site scripting XSS vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php...

CVE-2005-3958

SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idcat parameter in a showcat action and 2 the action parameter...

PT-2005-4687 · Php · Php Upload Center

Name of the Vulnerable Software and Affected Versions: PHP Upload Center affected versions not specified Description: A directory traversal issue exists in index.php, allowing remote attackers to read arbitrary files by including "../" sequences in the filename parameter of the vulnerable API...

CVE-2005-3924

SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the 1 kategorieid and 2 katid parameters...

CVE-2005-3924

CVE-2005-3924 is a SQL injection vulnerability in Randshop, specifically in themes/kategorie/index.php. The issue allows remote attackers to execute arbitrary SQL commands through the kategorieid and katid parameters. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low co...

CVE-2005-3920

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3909

CVE-2005-3909 describes an SQL injection vulnerability in the merchants/index.php file of Post Affiliate Pro 2.0.4 and earlier . The vulnerability allows remote attackers to inject arbitrary SQL via the sortorder parameter, potentially impacting confidentiality, integrity, and availability. The c...

CVE-2005-3874

SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pentry parameter in an entry command to index.php...

CVE-2005-3869

The CVE-2005-3869 entry describes a Cross-site scripting (XSS) flaw in index.php of Google API Search 1.3.1 and earlier, exploitable via hex-encoded values in the REQ parameter to inject arbitrary script/HTML. Affected software: Google API Search 1.3.1 and earlier. Impact per the source: user-fac...

CVE-2005-3874

CVE-2005-3874 describes an SQL injection in Netzbrett 1.5.1 and earlier caused by unsafely handling the p_entry parameter in the entry command to index.php via netzbr.php. The vulnerability allows a remote attacker to craft input that alters SQL queries, enabling arbitrary SQL command execution. ...

CVE-2005-3864

SQL injection vulnerability in SourceWell prior to or at version 1.1.2 (and conflicting reports for 1.1.3) allows remote attackers to execute arbitrary SQL commands via the cnt parameter in index.php. The issue is exploitable remotely over the network with no authentication required and can lead ...

CVE-2005-3868

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term, 2 id, 3 stat, and 4 source parameters to index.php, and 5 through the image parameters with an add request...

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2004-2574

Cross-site scripting XSS vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction...

K-Search Multiple vuln.

K-Search Multiple vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/k-search-multiple-vuln.html Vendor:http://turn-k.net/k-search affected version:1.0 and prior Product Description: K-Search is very fast and highly customizable meta-search...