Sql injection

SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2011-5229

SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2011-5214

CVE-2011-5214 concerns multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM, affecting version 5.100.01 and earlier. The issue allows remote attackers to inject arbitrary script or HTML via: (1) PATH_INFO to index.php, (2) modules/admin/admin_module_index.php, (3) modules/calendar/cu...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2010-4821

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2010-4821

Summary (CVE-2010-4821) A cross-site scripting (XSS) vulnerability affects phpMyFAQ prior to 2.6.9. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. The root cause is improper handling of PATH_INFO in the index entry point, leading to script...

CVE-2012-5343

Cross-site scripting XSS vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO, related to the "PHPSELF" variable...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO, related to the "PHPSELF" variable...

CVE-2012-5343

Cross-site scripting XSS vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO, related to the "PHPSELF" variable...

CVE-2012-5343

Limny 3.0.1 admin/login.php is vulnerable to Cross‑Site Scripting via PATH_INFO (PHP_SELF). OpenVAS confirms a Limny XSS issue; no explicit patch/fix details are provided in the supplied documents. A Limny 3.0.2.x release is referenced, but no confirmed remediation is stated here.

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

CVE-2012-5330

As provided, CVE-2012-5330 is an XSS vulnerability in asaanCart 0.9 affecting multiple entry points: the PATH_INFO parameters to calc.php, chat.php, register.php, or index.php in libs/smarty_ajax/, and the page parameter to libs/smarty_ajax/index.php. The description does not specify affected ver...

CVE-2011-4910

Cross-site scripting XSS vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2011-4910

The CVE-2011-4910 entry describes a Cross-site scripting (XSS) vulnerability in Joomla! prior to 1.5.12, exploitable by remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Affected product is Joomla! (older major version), with the root cause being improper handling/validat...

CVE-2011-4910

Cross-site scripting XSS vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 notifications.php, 2 modules/system/admin/images/browser.php, and 3...

CVE-2012-0989

Cross-site scripting XSS vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...