Sql injection

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter...

Sql injection

SQL injection vulnerability in jobseeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

Sql injection

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Sql injection

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter...

CVE-2008-4372

CVE-2008-4372 is an XSS vulnerability in the AvailScript Article Script, specifically in articles.php, exploitable via the aIDS parameter. This allows remote attackers to inject arbitrary web script or HTML. Public references (NVD, CVE lists) list a CVSS v2 base score of 4.3 (Medium) with user in...

CVE-2008-4371

CVE-2008-4371 describes a SQL injection in AvailScript Article Script : the vulnerability resides in articles.php and is exploitable via the aIDS parameter to execute arbitrary SQL commands remotely. The CVSS v2 base score is 7.5 (HIGH), with network access, low attack complexity, and no authenti...

CVE-2008-4371

SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter...

CVE-2008-4369

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2008-4369

CVE-2008-4369 corresponds to a SQL injection vulnerability in the Availscript Photo Album’s pics.php. The vulnerability is triggered via the sid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists the impact as Partial confidentiality, integrity, and availa...

CVE-2008-4373

CVE-2008-4373 affects AvailScript Job Portal Script, specifically the file job_seeker/applynow.php. The vulnerability is an SQL injection via the jid parameter that could allow remote attackers to execute arbitrary SQL commands. NVD data indicates a high impact with CVSS v2 base score 7.5 (NETWOR...

CVE-2008-4372

Cross-site scripting XSS vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter...

CVE-2008-4370

CVE-2008-4370 describes multiple cross-site scripting (XSS) vulnerabilities in the Availscript Photo Album. According to the provided documents, an attacker can inject arbitrary web script or HTML through the (1) sid parameter to pics.php and (2) the a parameter to view.php. The affected product ...

CVE-2008-4375

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4373

SQL injection vulnerability in jobseeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter...

CVE-2008-4375

CVE-2008-4375 describes an SQL injection in the Aula Availscript Classmate Script’s vulnerable file viewprofile.php , exploitable via the p parameter . The root cause is that user-supplied input reaches an SQL query without proper sanitization, enabling remote attackers to execute arbitrary SQL c...

CVE-2008-4372: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter...

CVE-2008-4369: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2008-4375: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter...