537 matches found
CVE-2007-0589
CVE-2007-0589 affects Forum Livre 1.0 and is a SQL injection vulnerability in the info_user.asp user parameter that could allow remote arbitrary SQL execution. Root cause: unsanitized user input enabling database command execution. Impact: attacker can read/modify data and potentially compromise ...
CVE-2007-0549
Cross-site scripting XSS vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2007-0542
Cross-site scripting XSS vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2007-0549
Cross-site scripting XSS vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
PT-2006-6644
Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...
PT-2006-5971 · 4Images · 4Images
Name of the Vulnerable Software and Affected Versions: 4images versions 1.7.x Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the search user parameter in the "search.php" file. Recommendations: For 4images versions 1.7.x, avoid using the search user...
CVE-2006-4879
SQL injection vulnerability in profile.php in David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2006-3273
Cross-site scripting XSS vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter "New Name" field...
CVE-2006-3273
The CVE-2006-3273 entry documents a Cross-site Scripting (XSS) vulnerability in menu.php of Some Chess 1.5 rc1, exploitable via the user parameter in the “New Name” field. The affected component is menu.php within Some Chess 1.5 rc1; the underlying cause is input that is not properly sanitized, e...
PT-2006-4147 · Vbulletin Solutions · Vbulletin
Name of the Vulnerable Software and Affected Versions: vBulletin versions 3.5.x Description: A cross-site scripting XSS issue in member.php allows remote attackers to inject arbitrary web script or HTML via the u parameter. The vendor has disputed this report, stating that they have been unable t...
YaBB SE <= 1.5.5 profile.php user Parameter SQL Injection
Binary data 3669.prm...
CVE-2006-2249
Multiple cross-site scripting XSS vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 story, or 3 title parameters...
CVE-2006-1144
Cross-site scripting XSS vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via 1 the user parameter in deleteuser.php and 2 the hits parameter in viewuser.php...
Alt-N WebAdmin USER Buffer Overflow
Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. This module requires Metasploit: https://metasploit.com/download Current source:...
Sql injection
SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2005-4307
Cross-site scripting XSS vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to 1 forum.cgi and 2 post.cgi, or 3 the user parameter to profile.cgi...
CVE-2005-4139
Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in calendar.php, 2 user parameter array in vprofile.php, and 3 the userid parameter in misc.php...