169 matches found
CVE-2008-1757
Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...
KwsPHP Module ConcoursPhoto XSS
AUTHOR : H-T Team Script : KwsPHP Module ConcoursPhoto Bug : XSS Dork : inurl:index.php?mod=ConcoursPhoto XPL http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=XSS = HouSSaMix + ToXiC350 = H-T Team...
Important: Red Hat Security Advisory: mysql security update
Updated mysql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
Sql injection
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter...
PT-2005-3982 · Php Fusion · Php-Fusion
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...
CVE-2005-0343
CVE-2005-0343 corresponds to a SQL injection in PerlDesk 1.x via the view parameter, enabling remote attackers to inject arbitrary SQL. Exploitation details in connected Nessus/NASL data indicate network-based, low-complexity access with no authentication, causing partial impact to confidentialit...
