CVE-2010-2457

Cross-site scripting XSS vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2010-2457

Technical details beyond the basic XSS description are not publicly available in the provided connected documents. CVE-2010-2457 is described as XSS in K-Search index.php via the term parameter; monitor for updates for fixes or affected versions.

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-2009-4906

CVE-2009-4906 is a CSRF vulnerability affecting Acc PHP eMail 1.1 (index.php). The issue allows remote attackers to hijack administrator authentication for requests that change passwords. Connected sources provide the same description across multiple feeds; CVSS2 base score is 6.8 (Medium) with n...

CVE-2009-4903

CVE-2009-4903 describes a Cross-site Scripting (XSS) flaw in the web app oBlog . The vulnerability is in the file index.php and is exploitable via the search parameter , allowing remote attackers to inject arbitrary script/HTML. The NVD entry notes a non-authoritative provenance (“NOTE: the prove...

CVE-2009-4903

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4909: Improper Authentication

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests...

CVE-2009-4905: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...

CVE-2010-2457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2009-4906: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-2010-2456: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the 1 cooklan cookie parameter $landir variable or possibly 2 Sdbtype parameter. NOTE: this was originally reported as remote file...

CVE-2010-2464: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the RSComments comrscomments component 1.0.0 Rev 2 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 website and 2 name parameters to index.php...

CVE-2009-4903: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...

CVE-2010-2438: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...

CVE-2010-2437: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php...

CVE-2010-2436: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

Linker IMG 1.0 Remote File Inclusion

|| || | || o,7 || . o7 || 4||| ow, : / / | 1 1 0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ------------------------------------------------------------ Remote File Inclusion Vulnerability...

CVE-2010-2357

SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: some of these details are obtained from third party information...