CVE-2013-3262: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter...

PT-2013-1986

Name of the Vulnerable Software and Affected Versions w-CMS version 2.01 Description A directory traversal issue exists in the getContent function in codes/wcms.php, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the p parameter. Recommendations F...

CVE-2012-6523: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...

PT-2012-5715

Name of the Vulnerable Software and Affected Versions AneCMS affected versions not specified Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter in the "acp/index.php" endpoint. Recommendations At the moment, there is no...

CVE-2012-4997: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

CVE-2012-4055: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2012-5174

Name of the Vulnerable Software and Affected Versions Uiga Personal Portal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index2.php" API endpoint. Recommendations At the moment, there i...

PT-2012-5173

Name of the Vulnerable Software and Affected Versions Uiga Fan Club affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index2.php" endpoint. Recommendations At the moment, there is no...

CVE-2012-4056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2012-5029

Name of the Vulnerable Software and Affected Versions Quick.CMS version 4.0 Description A cross-site scripting XSS issue exists in the default index page in admin/ due to improper validation of user input. This allows remote attackers to inject arbitrary web script or HTML via the p parameter in...

CVE-2012-3833: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter...

CVE-2011-4827: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 p parameter to redirect.php and 2 box parameter to includes/TrueColorPicker/index.php, which is not properly handled in...

PT-2011-1981

Name of the Vulnerable Software and Affected Versions ecoCMS affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the p parameter in the "admin.php" file. Recommendations At the moment, there is n...

CVE-2010-5046: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script or HTML via the p parameter...

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2011-1922

Name of the Vulnerable Software and Affected Versions KMSoft Guestbook aka GBook affected versions not specified Description A SQL injection issue exists in the default.asp file of KMSoft Guestbook, allowing remote attackers to execute arbitrary SQL commands by manipulating the p parameter in the...

CVE-2010-4987: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2011-1754

Name of the Vulnerable Software and Affected Versions Webmatic affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index.php" endpoint. Recommendations At the moment, there is no information...

CVE-2010-4808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...