CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

CVE-2008-6933: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

FaqRing 3.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || FaqRing 3.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://faqsystems.com/index.shtml Greetings : Mizoz, Zuka,...

CVE-2008-6923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6921: Undefined Security Weakness

Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username...

Sql injection

Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, as accessible from a form generated by index.php...

CVE-2008-6906

CVE-2008-6906 describes a cross-site scripting (XSS) vulnerability in BabbleBoard 1.1.6, specifically in the index.php file where an attacker can inject arbitrary web script or HTML via the username parameter. The issue is categorized with a low‑to‑moderate impact (CVSSv2 base score 4.3, MEDIUM) ...

CVE-2008-6905

CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...

CVE-2008-6905: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...

CVE-2008-6906: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username...

In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability

No description provided by source. @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author : Angela Chang Contact ...

CVE-2008-6892: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: this might be the same issue as CVE-2005-3572...

CVE-2009-2642

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...

CVE-2009-2642

The CVE-2009-2642 issue affects Desi Short URL Script 1.0, where index.php allows remote attackers to bypass authentication by tampering with cookies: set logged=1 and uid= (example 13). This indicates insufficient server-side validation of session cookies, enabling partial integrity and confiden...

Shop Script Cross Site Scripting

® -SHOP-SCRIPT XSS Remote Vulnerabilities- Script : shop-script premium Language : php Web Site : http://www.shop-script.com Autor : u.f. Thanks to : Jason, bull, T0r3x, Clark, Meth0d and all members r1zen.org Exploit Info Vuln is : /index.php? http://www.localhost.com/index.php?searchstring=XSS...

CVE-2009-2642: Improper Authentication

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...

CVE-2009-2638: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

CVE-2009-2641: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in appandreadme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...