216 matches found
CVE-2008-1757
Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...
CVE-2008-1757: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...
KwsPHP Module ConcoursPhoto XSS
AUTHOR : H-T Team Script : KwsPHP Module ConcoursPhoto Bug : XSS Dork : inurl:index.php?mod=ConcoursPhoto XPL http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=XSS = HouSSaMix + ToXiC350 = H-T Team...
Important: Red Hat Security Advisory: mysql security update
Updated mysql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...
CVE-2007-5138: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3213: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...
CVE-2006-3129: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 cat and 2 view parameters...
Sql injection
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter...
CVE-2006-1265: Undefined Security Weakness
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter...
PT-2005-3982 · Php Fusion · Php-Fusion
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...
CVE-2005-0980: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code...
CVE-2005-0343
CVE-2005-0343 corresponds to a SQL injection in PerlDesk 1.x via the view parameter, enabling remote attackers to inject arbitrary SQL. Exploitation details in connected Nessus/NASL data indicate network-based, low-complexity access with no authentication, causing partial impact to confidentialit...
