CVE-2007-1291

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

CVE-2007-1291: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

Cross site scripting

Cross-site scripting XSS vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1241

Cross-site scripting XSS vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1241: Undefined Security Weakness

Cross-site scripting XSS vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0526: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the URL PATHINFO to 1 articles/edit.php, 2 articles/list.php, 3 blogs/listblogs.php, or 4 blogs/rankings.php...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 index.php and 2 login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO string...

CVE-2007-0353

Cross-site scripting XSS vulnerability in 1 index.php and 2 login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO string...

CVE-2007-0353: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 index.php and 2 login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO string...

CVE-2007-0138

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with 1 AbfrageForm or 2 EingabeForm, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is...

CVE-2006-6910: Undefined Security Weakness

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with Abfrage, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter...

CVE-2006-6848

The CVE-2006-6848 entry describes an SQL injection in ASPTicker 1.0, exploiting admin.asp via PATH_INFO (possibly related to the Password parameter) to allow remote execution of arbitrary SQL. This conveys a remote, unauthenticated risk with potential data exposure or modification. No remediation...

CVE-2006-6848

SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO, possibly related to the Password parameter...

CVE-2006-6848: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO, possibly related to the Password parameter...

CVE-2006-6848

SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO, possibly related to the Password parameter...

CVE-2006-6910

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATHINFO begins with Abfrage, allows remote attackers to cause a denial of service daemon crash via multiple requests containing many /../ sequences in the Name parameter...

GLSA-200611-15 : qmailAdmin: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200611-15 qmailAdmin: Buffer overflow qmailAdmin fails to properly handle the 'PATHINFO' variable in qmailadmin.c. The PATHINFO is a standard CGI environment variable filled with user-supplied data. Impact : A remote attacker coul...

CVE-2006-5560

CVE-2006-5560 is a cross-site scripting vulnerability in Boesch ProgSys 0.151 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to admin/index.php and related files. CVSS v2.0 base score 4.3 (Medium): Network access, no authentication, partial inte...

CVE-2006-5560: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third...

CVE-2006-4794: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string PATHINFO in 1 contact.php, 2 download.php, 3 admin.php, 4 fpw.php, 5 news.php, 6 search.php, 7 signup.php, 8 submitnews.php, and 9 user.php. NOTE: the...