PHCDownload 1.1 - search.php?string Cross-Site Scripting

PHCDownload 1.1 - search.php?string Cross-Site Scripting source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

PHCDownload 1.1 - search.php?string SQL Injection

PHCDownload 1.1 - search.php?string SQL Injection source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

PHCDownload 1.1 - 'search.php?string' SQL Injection

source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

CVE-2007-6588

Cross-site scripting XSS vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6588

Cross-site scripting XSS vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6588

The provided records indicate a Cross-site scripting (XSS) vulnerability in PHCDownload 1.10, exploitable via the username field in an unspecified component. Affected software: PHCDownload 1.10. Root cause: inadequate sanitization of the username input leading to script/HTML injection. Impact: po...

CVE-2007-6588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-3525

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3525

CVE-2006-3525 affects PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier. The issue is an SQL injection in category.php allowing remote attackers to modify/execute arbitrary SQL via the id parameter. Documented impact: partial confidentiality, integrity, and availability consequenc...

CVE-2006-3525: Undefined Security Weakness

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3525

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...