429 matches found
CVE-2006-0240: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts...
CVE-2006-0234: Undefined Security Weakness
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-1148
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...
CVE-2005-0293: Undefined Security Weakness
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the month parameter...
CVE-2005-0294: Undefined Security Weakness
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...
CVE-2003-0416: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via 1 the year parameter in a showmonth action, 2 the month parameter in a showmonth action, or 3 the host parameter in a showhost action...