CVE-2010-2021

Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...

PT-2012-1299

Name of the Vulnerable Software and Affected Versions Drupal Global Redirect module versions 6.x-1.x before 6.x-1.4 Drupal Global Redirect module versions 7.x-1.x before 7.x-1.4 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Th...

CVE-2010-2021: Improper Input Validation

Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...

PT-2012-4368

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.15 Description The issue allows remote attackers to obtain sensitive information via the q parameter to "index.php", which reveals the installation path in an error message. This occurs due to a problem in the reques...

PT-2012-3028

Name of the Vulnerable Software and Affected Versions Tube Ace Adult PHP Tube Script version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in the "mobile/search/index.php" endpoint. Recommendations For Tube Ace Adult PHP...

CVE-2012-1029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

PT-2011-5000

Name of the Vulnerable Software and Affected Versions CF Image Hosting Script versions 1.3.82 through 1.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the q parameter in the inc/tesmodrewite.php file. Recommendations For CF Imag...

CVE-2011-4572: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2010-4909: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

PT-2011-3278

Name of the Vulnerable Software and Affected Versions Anzeigenmarkt 2011 affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in a "list" action, specifically targeting the index.php file...

CVE-2011-1667: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

PT-2010-5602

Name of the Vulnerable Software and Affected Versions JQuarks4s com jquarks4s component version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible due to a SQL injection vulnerability in the submitSurvey function in controller.php, when magic...

CVE-2010-4638: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s comjquarks4s component 1.0.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...