PT-2006-6611 · Funkyasp · Funkyasp Glossary

Name of the Vulnerable Software and Affected Versions: FunkyASP Glossary version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in the demo/glossary/glossary.asp file. Recommendations: For FunkyASP Glossary...

CVE-2005-4455: Undefined Security Weakness

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi...

PT-2005-4293 · Php · Php Handicapper

Name of the Vulnerable Software and Affected Versions: PHP Handicapper affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the serviceid parameter in the process signup.php file. The vendor initially disputed this issue,...

PT-2005-2567 · Quick.Cart · Quick.Cart

Name of the Vulnerable Software and Affected Versions: Quick.cart version 0.3.0 Description: The issue concerns a potential SQL injection vulnerability in the index.php file of Quick.cart, allegedly allowing remote attackers to execute arbitrary SQL commands via the iCategory parameter. However,...