CVE-2009-0645: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the 1 language, 2 Introductioncomplete, and 3 uselog parameters, different vectors than CVE-2004-2445...

CVE-2008-6164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-0639: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter...

CVE-2009-0604

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter...

Sql injection

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter...

CVE-2009-0604

CVE-2009-0604 affects PHP Director 0.21 and earlier. The vulnerability is a SQL injection in index.php triggered via the searching parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation and affected version details are supported by multiple sources (NVD, CVE listings...

Sql injection

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155

SQL injection vulnerability in index.php of Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. Affected software is Hispah Text Links Ads 1.1; root cause is improper handling of the idtl parameter leading to SQL injection. C...

CVE-2008-6154

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

CVE-2009-0598

CVE-2009-0598 affects PhpMesFilms (versions 1.0 and 1.8). The vulnerability is an SQL injection in index.php via the id parameter, allowing remote attackers to execute arbitrary SQL. Underlying cause: unsafe handling of the id input. Impact is partial confidentiality/integrity/availability with C...

CVE-2009-0594

CVE-2009-0594 affects phpSkelSite 1.4 in the file index.php, where a cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. This is the underlying cause noted in the description. The supplied documents do not specify ...

CVE-2009-0597

CVE-2009-0597 describes an SQL injection in the w3b>cms (aka w3blabor CMS) admin/index.php before version 3.4.0, exploitable when magic_quotes_gpc is disabled. A remote attacker can inject SQL via the benutzername (Username) field in the login action, potentially executing arbitrary SQL comman...

CVE-2009-0603: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...

CVE-2008-6155: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

CVE-2009-0594: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-0598: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0597: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...

CVE-2009-0604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter...