Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5271

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5271: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-2818

Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the section parameter to the default URI...

CVE-2008-2818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the section parameter to the default URI...

CVE-2008-0255: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2007-2470: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...

PT-2006-6422 · Atutor · Atutor

Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...

CVE-2006-5318: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2005-3404: Undefined Security Weakness

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte %00 in 1 bodyheader.inc.php and 2 print.php...

CVE-2002-2114: Undefined Security Weakness

Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call...

CVE-2002-1785: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi...