CVE-2007-5452: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 ip or 2 t parameter...

CVE-2007-3684: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 q and 2 t parameters in a db.php and b rpc.php...

CVE-2007-0952: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the 1 t and 2 yr parameters, and the 3 sho parameter when the m parameter is outside the intended range...

CVE-2006-3036

Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...

CVE-2006-1669

The CVE-2006-1669 entry documents a SQL injection in phpHeaven Team PHPMyChat 0.14.5 and earlier, exploitable via the T parameter in chat/messagesL.php3. The underlying issue allows remote command execution as the username is later processed in an eval() call, and the username originates from the...

CVE-2006-1669: Undefined Security Weakness

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval...

CVE-2005-3512: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via the t parameter in a newreply action...

PT-2005-4308 · Vubb · Vubb

Name of the Vulnerable Software and Affected Versions: VUBB alpha version rc1 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the t parameter in a "newreply" action. This can occur in the index.php file. Recommendations: F...

CVE-2005-0414: Undefined Security Weakness

SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with 1 the t parameter or 2 the qu parameter...

CVE-2001-0231: Undefined Security Weakness

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...