CVE-2005-4032: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4004: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

qnews.txt

Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...

CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3859

CVE-2005-3859 describes a PHP remote file inclusion vulnerability in q-news.php (Q-News 2.0) that allows an attacker to execute arbitrary PHP code via a URL supplied in the id parameter. Affected software: Q-News 2.0. Root cause: improper handling of the id parameter enabling inclusion of remote ...

CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3859: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

Remote file include in Q-News

Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...

[SA17771] Q-News "id" File Inclusion Vulnerability

TITLE: Q-News "id" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17771 VERIFY ADVISORY: http://secunia.com/advisories/17771/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Q-News 2.x http://secunia.com/product/6232/ DESCRIPTION: GB has discovered a vulnerabilit...

CVE-2005-3849: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3850: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in Online Knowledge Base System OKBSYS Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter...

Q-News 2.0 - Remote File Inclusion

Q-News 2.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/15576/info Q-News is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remot...

Q-News 2.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15576/info Q-News is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer...

CVE-2005-2084: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter...

koobi-cms423.txt

SQL-injections in koobi-cms 4.2.3 The program: koobi-cms Homepage: http://www.dream4.de/ Vulnerable Versions: 4.2.3 Has found: CENSORED SVT 28.04.05 The description --------------- Vulnerability has been found in parameter page. In koobi-cms it Refers to - p. Data transferred to this parameter no...

ePSXe 1.6.0 - nogui() Local Privilege Escalation

ePSXe 1.6.0 - nogui Local Privilege Escalation / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack point...

CVE-2004-2108

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 search.asp, 2 browse.asp, 3 details.asp, 4 showcat.asp, 5 users.asp, 6 addtomylist.asp, 7 modline.asp, 8 cart.asp, or 9 newuser.asp...

CVE-2004-2109

Multiple cross-site scripting XSS vulnerabilities in 1 imagezoom.asp or 2 recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL...

CVE-2004-2108

CVE-2004-2108 : The QuadComm Q-Shop product (noted on CVE records) contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via parameters to specific ASP pages (search.asp, browse.asp, details.asp, showcat.asp, users.asp, addtomylist.asp, modline.asp, ...