Sql injection

SQL injection vulnerability in page.php in SLsite 1.0 allows remote attackers to execute arbitrary SQL commands via the idpage parameter. NOTE: this issue could be used to produce resultant XSS from an error message...

CVE-2006-2013

The CVE-2006-2013 issue concerns SL_site 1.0 with a SQL injection in page.php via the id_page parameter. The vulnerability allows remote execution of arbitrary SQL commands, and the error message could trigger a resultant XSS. Affected component: page.php in SL_site 1.0; root cause: improper inpu...

CVE-2006-2013: Undefined Security Weakness

SQL injection vulnerability in page.php in SLsite 1.0 allows remote attackers to execute arbitrary SQL commands via the idpage parameter. NOTE: this issue could be used to produce resultant XSS from an error message...

CVE-2006-1616: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to comments.php or 2 pollid parameter to page.php...

CVE-2006-1617: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...

CVE-2006-0783

Cross-site scripting XSS vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the commenttext parameter to the user comment page /edit/Comment...

CVE-2006-0783: Undefined Security Weakness

Cross-site scripting XSS vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the commenttext parameter to the user comment page /edit/Comment...

CVE-2006-0313

Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving 1 util.php, 2 userpref.php, 3 user.php, 4 uploadfrm.php, 5 title.php, 6 team.php, 7 stats.php, 8 page.php, 9 org.php, 10 member.php...

CVE-2006-0313: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving 1 util.php, 2 userpref.php, 3 user.php, 4 uploadfrm.php, 5 title.php, 6 team.php, 7 stats.php, 8 page.php, 9 org.php, 10 member.php...

CVE-2005-4362

The CVE-2005-4362 entry concerns a SQL injection vulnerability in Komodo CMS 2.1, exploitable via the page parameter in page.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands. According to NVD, the impact is partial integrity loss with no confidentiality or ava...

CVE-2005-4362: Undefined Security Weakness

SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2004-2364: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using 1 admin/page.php, 2 admin/news.php, 3 admin/user.php, 4 admin/images.php, 5...

CVE-2005-1440: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 various parameters to basket.php, 2 the nickname, email, topic, and message fields in forum.php, as demonstrated using forumnewthread.php and...

CVE-2004-1738: Undefined Security Weakness

Cross-site scripting XSS vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter...

CVE-2005-0537: Undefined Security Weakness

Multiple SQL injection vulnerabilities in page.php for iGeneric iG Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the 1 cats, 2 lprice, or 3 uprice parameters...

JShop E-Commerce Suite 3.0 - Page.PHP Cross-Site Scripting Vulnerability

JShop E-Commerce Suite v3 Page.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/11003/info Reportedly the JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'page.php' script. This issue is due to a...