dacios CMS 1.08 - Cross-Site Scripting SQL Injection File Disclosure

dacios CMS 1.08 - Cross-Site Scripting SQL Injection File Disclosure =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = Dacio's PHP scripts CMS v1.08 Remote SQL Injection Vuln. =...

E-PHP Scripts B2B Trading Marketplace XSS

E-Php Scripts B2B Trading Marketplace XSS Vulnerability Dicovered By: SaiedHacker Group: HackeranShiraz Security Team Web Address: www.HackeranShiraz.Com E-mail: [email protected] Exploits: http://Target/b2b/signin.php?errmsg=%3Cscript%3Ealert1;%3C/script%3E...

E-PHP Scripts EShop SQL Injection

E-Php Scripts Eshop 'searchresults.php' SQL Injection Vulnerability Dicovered By: SaiedHacker Group: HackeranShiraz Security Team Web Address: www.HackeranShiraz.Com E-mail: [email protected] Exploit:...

CVE-2008-5906: Improper Input Validation

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5838

CVE-2008-5838 is a SQL injection vulnerability in the E-Php Scripts E-Shop Shopping Cart, affecting the search_results.php code path. The vulnerability allows remote attackers to inject arbitrary SQL via the cid parameter, potentially compromising data integrity and partial confidentiality. The N...

CVE-2008-5838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Netref 4.0 - Multiple SQL Injections

SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader : http://www.phpscripts-fr.net/scripts/download.php?id=62...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4802

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4802

CVE-2008-4802 is described as a Cross-site scripting (XSS) vulnerability in complete.php of Simple PHP Scripts blog 0.3, where an attacker can inject arbitrary script or HTML via the id parameter. The root cause is unsanitized user input in that parameter. Affected product/component: Simple PHP S...

CVE-2008-4803

CVE-2008-4803 affects the Simple PHP Scripts Gallery (index.php) versions 0.1, 0.3 and 0.4. The vulnerability is a reflected XSS triggered through the gallery parameter, allowing an attacker to inject arbitrary script/HTML. The available documents do not provide remediation details or explicit ex...

CVE-2008-4802: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4803: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Gentoo Security Advisory GLSA 200503-04 (phpwebsite)

The remote host is missing updates announced in advisory GLSA 200503-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-41 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200501-41. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200503-04 (phpwebsite)

The remote host is missing updates announced in advisory GLSA 200503-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-41 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200501-41. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-12 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200501-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...