CVE-2008-1536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-0264: Improper Input Validation

Unspecified vulnerability in the Meta Tags aka Nodewords 5.x-1.6 module for Drupal, when images are permitted in node bodies, allows remote authenticated users to execute arbitrary code via unspecified vectors involving creation of a node...

phpfaber-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

phpnukeplat-rfi.txt

---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net & ascnet.biz :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...

CVE-2007-3640: Undefined Security Weakness

Adobe Integrated Runtime AIR, aka Apollo allows context-dependent attackers to modify arbitrary files within an executing .air file compiled AIR application and perform cross-site scripting XSS attacks, as demonstrated by an application that modifies an HTML file inside itself via JavaScript that...

CVE-2007-2992: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allow remote attackers to execute arbitrary SQL commands via 1 user-created text fields; the 2 F05003, 3 F05005, and 4 F05015 fields; and other unspecified standard fields...

CVE-2007-2993: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in OmegaMw7.asp in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allow remote attackers to inject arbitrary web script or HTML via 1 user-created text fields; the 2 F05003, 3 F05005, and 4 F05015 fields; and other unspecified standard fields...

CVE-2007-2575: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in watermark.php in the vm aka Jean-Francois Laflamme watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter...

CVE-2007-1487: Undefined Security Weakness

Directory traversal vulnerability in index.php in Sascha Schroeder aka CyberTeddy or Cyber-inside WebLog allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a showarticles action...

CVE-2007-0784: Undefined Security Weakness

SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection aka RBL - ASP allows remote attackers to execute arbitrary SQL commands via the 1 User and 2 Password parameters...

CVE-2007-0398: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in forum.php3 in Arnaud Guyonne aka Arnotic a-forum allow remote attackers to inject arbitrary web script or HTML via the 1 Sujet or 2 Pseudo field...

CVE-2006-5126: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in John Himmelman aka DaRk2k1 PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter...

CVE-2006-2841: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...

CVE-2006-2640: Undefined Security Weakness

Cross-site scripting XSS vulnerability in OmegaMw7a.ASP in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allows remote attackers to inject arbitrary web script or HTML via the WCE parameter...

CVE-2006-1954: Undefined Security Weakness

SQL injection vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2006-1955: Undefined Security Weakness

PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-1897: Undefined Security Weakness

Webplus aka talentsoft Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote ' or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script...

CVE-2006-1889: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search action handler in index.php in Nils Asmussen aka SCRIPTSOLUTION Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Search for" item keyword parameter...

CVE-2005-4659: Undefined Security Weakness

IPCop aka IPCop Firewall before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from th...