7215 matches found
CVE-2005-3854
Cross-site scripting XSS vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2005-3844
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...
CVE-2005-3844
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...
CVE-2005-3844
CVE-2005-3844 concerns a SQL injection vulnerability in the phpWordWordPress PHP News and Article Manager 3.0. The issue allows remote attackers to execute arbitrary SQL commands via parameters: (1) poll and (2) category in index.php, and (3) ctg in an archive action. Affected software is the PHP...
CVE-2005-3842
The CVE-2005-3842 entry concerns a SQL injection vulnerability in index.php of the pdjk-support suite, version 1.1a and earlier. The flaw allows remote attackers to inject arbitrary SQL via the rowstart, news_id, and faq_id parameters, potentially impacting confidentiality, integrity, and availab...
CVE-2005-3828
ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...
CVE-2005-3830
Affected software/issue. ActiveCampaign SupportTrio 1.4 and earlier is affected by a directory traversal vulnerability in index.php, allowing remote attackers to read or include arbitrary files via the page parameter. This is the root cause described as a directory traversal issue, with potential...
CVE-2005-3825
The CVE-2005-3825 entry concerns a SQL injection in Comdev Vote Caster (version 3.1 and earlier) via the campaign_id parameter in a result action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the NVD listing a CVSSv2 base score of 7.5 (HIGH) and a network atta...
iSupport 1.x "include_file" SQL inj.
iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...
sNews 1.3 SQL injection.
sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...
phpWordPress 3.0 SQL inj.
phpWordPress Article Manager 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/phpwordpress-30-sql-inj.html Vendor:http://www.word-press.net/ affected version: 3.0 and prior. Vuln. Description: Input passed to the "poll" "category" and...
CVE-2005-3795
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...
CVE-2005-3798
The CVE-2005-3798 entry describes a SQL injection vulnerability in the admin/index.php script of AlstraSoft Template Seller Pro 3.25 . The underlying issue is an injectable username parameter that permits remote attackers to execute arbitrary SQL commands. This is the only concrete detail provide...
CVE-2005-3744
CVE-2005-3744 describes a SQL injection vulnerability in the PHP application phpComasy, affecting version 0.7.5 and earlier. The flaw is claimed to be exploitable via the parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Note: the 0.7.5 source reportedly does n...
CVE-2005-3744
SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php...
CVE-2005-3697
Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...
CVE-2005-3679
CVE-2005-3679 describes an SQL injection in ActiveCampaign 1-2-All Broadcast Email, specifically in admin/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Affected component: ActiveC...
CVE-2005-3348
CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...
class-1 Poll Software Multiple SQL Injection Vulnerabilities.
class-1 Poll Software Multiple SQL Injection Vulnerabilities. Author: r0t hackers.by.lv Date: 17 nov. 2005 Software:class-1 Poll Software v 0.4 Vendor:http://www.class1web.co.uk/ affected: v 0.4 and prior Description: Input passed to the "pollid" and "previouspoll" parameter in "index.php" isn't...