CVE-2012-1792: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, whi...

PT-2012-3542

Name of the Vulnerable Software and Affected Versions OSCommerce Online Merchant version 3.0.2 Description A cross-site scripting XSS issue exists in the software during installation, allowing remote attackers to inject arbitrary web script or HTML via the name parameter to "oscommerce/index.php"...

CVE-2011-3832

Eval injection vulnerability in config.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the applicationname parameter in a save action...

PT-2012-1740

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated administrators to execute arbitrary PHP code. This is achieved via the application name parameter in a save action. Recommendations For version...

CVE-2011-5026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

PT-2011-4980

Name of the Vulnerable Software and Affected Versions Prestashop version 1.4.4.1 Description A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter in the admin/displayImage.php file. Recommendations For...

CVE-2011-4545: Improper Control of Generation of Code

CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter...

PT-2011-1983

Name of the Vulnerable Software and Affected Versions JComments com jcomments component version 2.1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to...

CVE-2010-5048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...

CVE-2010-4895

Cross-site scripting XSS vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the username field. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the username field. NOTE: some of these details are obtained from third party information...

PT-2011-1830

Name of the Vulnerable Software and Affected Versions chillyCMS version 1.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the name parameter, also known as the username field. Recommendations For...

PT-2011-1839

Name of the Vulnerable Software and Affected Versions Joomla! component com aardvertiser versions 2.1 through 2.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat name parameter in a view action to "index.php". Recommendations For...

CVE-2010-4894: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4895: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the username field. NOTE: some of these details are obtained from third party information...

PT-2011-1829

Name of the Vulnerable Software and Affected Versions chillyCMS version 1.1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the core/showsite.php file. Recommendations For chillyCMS version 1.1.3, avoid using the name...

Sql injection

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4842

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4842: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...