CVE-2010-2722: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...

CVE-2010-2714: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

Koobi CMS SQL Injection

===================================================== Koobi CMS index.php SQL Injection Vulnerability ===================================================== /\ \ /\ \ /\ \ /'\ /\ /\ /\ \ /\ \ /\ \ \ ,\L\//\ / \ \ \ /\L\ \ \ \ \ \ /\//\ / \ \ /\ \ /\ \ \ \ \ \ \ \ //\ \ , \ \ // \ \ ...

CVE-2010-2715: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability but may be bypassed. The specific flaw exists in the handling of the 'preauth' variable to the script index.php use...

BigThink XT (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== BigThink XT index.php SQL Injection Vulnerability =================================================== /\ \ /\ \ /\ \ /'\ /\ /\ /\ \ /\ \ /\ \ \ ,\L\//\ / \ \ \ /\L\ \ \ \ \ \ /\//\ /...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2010-2700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script CBQuick allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2010-2699: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script CBQuick allows remote attackers to execute arbitrary SQL commands via the search parameter...

Sardus (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

CVE-2010-2697: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2694: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the redSHOP Component comredshop 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter to index.php...

CVE-2010-2696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrary SQL commands via the parent parameter...

CVE-2009-4934

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2010-2684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4926: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

CVE-2009-4934: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2010-2674: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action...

LojaDoSite Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ LojaDoSite Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

CVE-2010-2676: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics OWA 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the 1 owaaction and 2 owado parameters...