CVE-2008-3193: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

CVE-2008-3154

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3119: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2921

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2921: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2895

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2887

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2887

The CVE-2008-2887 entry describes a directory traversal in index.php of chaozz@work FubarForum 1.5 that allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Affected software: FubarForum 1.5 (chaozz@work). Root cause: improper handling of page param...

CVE-2008-2896: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2895: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2897: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2796

SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2796: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2644

Multiple cross-site scripting XSS vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the 1 data parameter to catalog.php, the 2 keyword parameter to search.php, the 3 page parameter to bb.php, and the 4 news parameter to order.php...

CVE-2008-2477: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MxBB aka MX-System Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2008-3301 · Blogator · Blogator-Script

Name of the Vulnerable Software and Affected Versions: Blogator-script version 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the incl page parameter in several PHP files, including struct admin.php, struct admin blog.php, and struct main.php in the...

CVE-2008-1537: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pbinc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC...