CVE-2010-1606

Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...

CVE-2010-1604

CVE-2010-1604 involves multiple SQL injection vulnerabilities in admin_login.php of the NCT Jobs Portal Script, allowing remote attackers to inject SQL via the login (user) and password (passwd) fields. The issue stems from unsafely constructed SQL queries in the login handling code, enabling arb...

CVE-2010-1606: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...

CVE-2010-1605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in isearch.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 anyword and 2 cityname parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1604: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

CVE-2009-4673

CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...

CVE-2009-4673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Softbiz Recipes Portal Script - 'showcats.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Recipes Portal Script SQL Injection showcats.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Recipes Portal Script +Price : 99$ +Language : PHP +Discovered by Easy Laster +Securit...

CVE-2009-4617: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotelid parameter to 1 hotel.php, 2 details.php, 3 roomtypes.php, 4 photos.php, 5 map.php, 6 weather.php, 7 reviews.php, and 8 book.p...

Unrestricted file upload

Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, then accessing it via a direct request to the file in an unspecified directory...

CVE-2008-7021: Undefined Security Weakness

Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, then accessing it via a direct request to the file in an unspecified directory...

Jokes Portal Script Seo 1.0 XSS

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Jokes Portal Script Seo 1.0 Search Remote XSS Vulnerabilities + Software : Jokes Portal Script Seo + Author : 599eme Man + Contact : [email protected] +...

Umer Inc Songs Portal Script (id) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Umer Inc Songs Portal Script - 'id' SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

CVE-2008-4373

SQL injection vulnerability in jobseeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter...

CVE-2008-4373

SQL injection vulnerability in jobseeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter...

CVE-2008-4373: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jobseeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter...

Availscript Jobs Portal Script File Upload Vulnerability (auth)

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload

AvailScript Jobs Portal Script - Authenticated Arbitrary File Upload || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of...