Sql injection

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2007-3307: Undefined Security Weakness

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2007-0817

Cross-site scripting XSS vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page...

CVE-2006-5661

Cross-site scripting XSS vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2006-5661

Cross-site scripting XSS vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2006-5227: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...

CVE-2006-4451: Undefined Security Weakness

Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...

CVE-2006-3950

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2006-3950: Undefined Security Weakness

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2006-3276: Undefined Security Weakness

Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via 1 a long User-Agent HTTP header in the RTSP service and 2 unspecified vectors involving the "parsing of HTTP URL schemes"...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558: Undefined Security Weakness

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2130

SQL injection vulnerability in include/classpoll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

DEBIAN-CVE-2006-1012

SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment...

CVE-2006-0846: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Referer and 2 User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly usin...

Cross site scripting

Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $SERVERHTTPUSERAGENT variable User-Agent header...

CVE-2005-2853: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pg parameter to printfaq.php, or the 2 Referer or 3 User-Agent HTTP headers, which are not properly handled by error.php...

CVE-2005-2028: Undefined Security Weakness

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2003-1165

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2003-1165: Undefined Security Weakness

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...