CVE-2006-2005

Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by som...

CVE-2006-2005: Undefined Security Weakness

Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by som...

CVE-2006-1913

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1906

Cross-site scripting XSS vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1878: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1913: Undefined Security Weakness

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1906: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Design/Logic Flaw

xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the 1 action parameter to membersonly/index.cgi and 2 page parameter customerarea/index.cgi, probably due to invalid values...

CVE-2006-1799: Undefined Security Weakness

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

CVE-2006-1765

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1765: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1760: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 Classic.view/thumbnail.php, 2 Classic.view/gallery.php, 3 Classic.view/detail.php, or 4 Orange.view/detail.php; or 5 the name parameter in...

CVE-2006-1713

Cross-site scripting XSS vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1713: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1584: Undefined Security Weakness

Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" paramet...

CVE-2006-1497: Undefined Security Weakness

Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter...

CVE-2006-1482

Cross-site scripting XSS vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1482

Cross-site scripting XSS vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1482: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...