EUVD-2009-4947

Malware in sbrugna...

Extreme CMS Me***.php file has SQL injection vulnerability

Extreme CMS is an open source and free PHPCMS web content management system. An SQL injection vulnerability exists in the Extreme CMS Me.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

PHPCMS me***.php page suffers from SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. A SQL injection vulnerability exists in the PHPCMS me.php page, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in me***.php file of Yunye CMS frontend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the me.php file in the frontend of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

ESPCMS P8 Me***.php page has xss vulnerability

ESPCMS is an enterprise website management system built on LAMP development. An xss vulnerability exists in the ESPCMS P8 Me.php page. Attackers can use the vulnerability to obtain cookie access when logging into the background as an administrator...

CVE-2009-4984

Multiple cross-site scripting XSS vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Keywords parameter to search.php and 2 SearchIndex parameter to browse.php...

Sql injection

SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter...

CVE-2009-4985

SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter...

CVE-2009-4984

Multiple cross-site scripting XSS vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Keywords parameter to search.php and 2 SearchIndex parameter to browse.php...

CVE-2009-4984

CVE-2009-4984 affects Accessories Me PHP Affiliate Script 1.4. The vulnerability is described as multiple cross-site scripting (XSS) in which attackers can inject arbitrary web script or HTML via the Keywords parameter to search.php and the SearchIndex parameter to browse.php. The connected recor...

CVE-2009-4985

CVE-2009-4985 describes an SQL injection in browse.php of Accessories Me PHP Affiliate Script 1.4, allowing remote attackers to execute arbitrary SQL via the Go parameter. Affected component is the browser page handling the Go input in the script. The underlying cause is improper input handling l...

CVE-2006-0093

CVE-2006-0093 describes a Cross-site Scripting (XSS) vulnerability in index.php of @Card ME PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter. According to the NVD entry, the flaw has a CVSS v2 base score of 4.3 (Medium) with network access and no...