437 matches found
CVE-2008-4704: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...
Sql injection
SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...
CVE-2008-0224
SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...
CVE-2008-0224
SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...
CVE-2007-6583
SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip parameter...
CVE-2007-6583: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip parameter...
CVE-2007-5452: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 ip or 2 t parameter...
CVE-2007-4917: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334...
CVE-2007-4334
Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...
CVE-2007-4334: Undefined Security Weakness
Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...
CVE-2006-7172: Undefined Security Weakness
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the 1 PC-REMOTE-ADDR HTTP header, which is inserted into $SERVER'HTTPPCREMOTEADDR', or 2 ip parameter...
CVE-2006-7122: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the IP Address Lookup functionality in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter...
Sql injection
SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...
CVE-2005-3025: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to 1 modcp/index.php or 2 admincp/index.php, or the ip parameter to 3 modcp/user.php or 4 admincp/usertitle.php...
CVE-2005-1559
The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...
CVE-2005-1559: Undefined Security Weakness
The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...
