2307 matches found
Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Fully Modded phpBB = 2021.4.40 Multiple File Include Vulnerabilities ===================================================================== Fully Modded phpBB 2 Remote Fi...
CVE-2006-5228
Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...
CVE-2006-5228: Undefined Security Weakness
Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...
CVE-2006-5119: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 adminname or 2 adminpass parameter in a admin/login.php, or the 3 adminemail parameter in b admin/passwordforgotten.php...
CVE-2006-5059
Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...
CVE-2006-5060: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode...
CVE-2006-5060
The CVE-2006-5060 entry concerns a cross-site scripting (XSS) vulnerability in Jamroom 3.0.16 (and possibly earlier) within login.php, exploitable via the forgot parameter in the forgot mode. The NVD details a CVSSv2 base score of 5.1 (Medium) with network attack vector, high complexity, no authe...
CVE-2006-4863: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in 1 login.php, 2 stats.php, 3 detail.php, or 4 erase.php. NOTE: CVE and a third party dispute this vulnerability,...
CVE-2006-4836
SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-42...
CVE-2006-4836
CVE-2006-4836 affects DCP-Portal SE 6.0 via SQL injection in login.php (username parameter). Describes remote SQL execution risk and notes that lostpassword.php/calendar.php vectors are covered by CVE-2005-3365 and search.php by CVE-2005-4227. No explicit remediation or patch details are provided...
CVE-2006-4836: Undefined Security Weakness
SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-42...
CVE-2006-4705
SQL injection vulnerability in login.php of Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. This affects Timesheet 1.2.1 as reported by CVE records. The connected documents specify the vulnerability and payload vector but d...
CVE-2006-4705: Undefined Security Weakness
SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet aka Timesheet.php 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-4594: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpAtm 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter in 1 confirm.php or 2 login.php. NOTE: the includelocation parameter to index.php is already...
phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities
phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...
CVE-2006-4268: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 file, 2 x, and 3 y parameters in a admin/filemanager/preview.php; and the 4 email parameter in b admin/login.php...
WebspotBlogging login.php远程SQL注入漏洞
BUGTRAQ ID: 16319 CVECAN ID: CVE-2006-0324 WebspotBlogging是一款PHP编写的Blog程序。 WebspotBlogging对用户提交给的参数缺少正确充分的过滤，远程攻击者可以利用此漏洞非授权操作数据库绕过认证。 WebspotBlogging的login.php脚本对用户提交username参数数据缺少充分过滤，远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 WebspotBlogging WebspotBlogging 3.0 WebspotBlogging ---------------...
CVE-2006-4158: Undefined Security Weakness
PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-4073: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...
Spaminator <= 1.7 (page) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================== Spaminator = 1.7 page Remote File Include Vulnerability ========================================================== Spaminator 1.7. $page Remote File Include CreW: ToXiC BuG Found B...