2179 matches found
CVE-2005-4302: Undefined Security Weakness
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter...
CVE-2005-4078
Multiple cross-site scripting XSS vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 forumID, 2 boardID, and 3 topicRepeater1-p parameters in topics.aspx, 4 boardID parameter in categoryindex.aspx, 5 postID parameter in...
CVE-2005-4043: Undefined Security Weakness
SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 arrange and 2 p parameters...
CVE-2005-3202: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Oracle HTML DB HTMLDB 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the 1 p or 2 pt02 parameters...
security flaw
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...
CVE-2005-2812: Undefined Security Weakness
man2web allows remote attackers to execute arbitrary commands via -P arguments...
CVE-2004-2275: Undefined Security Weakness
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
CVE-2005-2233: Undefined Security Weakness
Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to 1 penable or other hard-linked files including 2 pdisable, 3 pstart, 4 phold, 5 pdelay, or 6 pshare...
DEBIAN-CVE-2005-2107
Multiple cross-site scripting XSS vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p or 2 comment parameter...
WordPress <= 1.5.1.2 - Multiple XSS vulnerabilities
Because of these vulnerabilities in post.php, attackers can inject arbitrary web script or HTML via the "p" or "comment" parameter. Solution Update the WordPress to the latest available version at least 1.5.1.3...
CVE-2005-2107: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p or 2 comment parameter...
CVE-2002-1705: Undefined Security Weakness
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service crash via a Cascading Style Sheet CSS with the pcssText element declared and a bold font weight...
CVE-2004-2132: Undefined Security Weakness
Directory traversal vulnerability in PJreviewNeo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...
CVE-2004-2041: Undefined Security Weakness
PHP remote file inclusion vulnerability in secureimgrender.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code...
CVE-2005-1447: Undefined Security Weakness
PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to execute arbitrary PHP code via the p parameter...
CVE-2005-1373: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 q or 2 p parameters...
CVE-2005-1378: Undefined Security Weakness
SQL injection vulnerability in postingnotes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $postid variable, and other attack vectors...
CVE-2004-1570: Undefined Security Weakness
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter...
CVE-2004-1161: Undefined Security Weakness
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via 1 rdist -P, 2 rsync, or 3 scp -S...
CVE-2003-0408: Undefined Security Weakness
Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...