CVE-2009-0814

Cross-site scripting XSS vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

Blogsa 1.0 Beta 3 Cross Site Scripting

Software: Blogsa onuryilmazinfo XSS http://localhost/Widgets.aspx?w=Search&p=do&searchText=alertdocument.cookie Screen http://img14.imageshack.us/img14/7803/12371681.jpg ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Progra...

CVE-2008-5901

CVE-2008-5901 affects iyzi Forum 1.0 beta 3, where sensitive information is stored under the web root with insufficient access control. A direct request to the file db/iyziforum.mdb can allow remote attackers to download the database, exposing passwords. The CVSS data (NVD) characterizes the impa...

CVE-2008-2856

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2855

Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2856

CVE-2008-2856 affects OwnRS Beta 3 through clanek.php, where the id parameter enables SQL injection. The vulnerability allows remote execution of arbitrary SQL commands (impact: partial confidentiality/integrity/availability per CVSS), with a network attack vector and low complexity. The base sco...

CVE-2008-2855

Affected software: OwnRS Beta 3. Component: clanek.php. Vulnerability: Cross-site scripting (XSS) via the id parameter. Root cause: lack of proper sanitization/output of user-supplied id leading to injection of arbitrary script/HTML. Impact: remote attacker can inject scripts into the victim’s br...

CVE-2008-2855

Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-2856

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

paBugs 2.0 Beta 3 - main.php?cid SQL Injection

paBugs 2.0 Beta 3 - main.php?cid SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print ...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

Integer overflow

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

Code injection

Unspecified vulnerability in search/list/actionsearch/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the formsearchterm parameter...

CVE-2007-2579

Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...

CVE-2007-2577

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via 1 the mode parameter to feeds.php, the 2 formcat parameter to a news/list/index.php or b certain news/details/id/actioncreate/index.php files, or 3 the formmods parameter to...

CVE-2007-2579

CVE-2007-2579 concerns ACP3 4.0 beta 3, where multiple cross-site scripting (XSS) vectors exist. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through various parameters across the application: form[mail] to contact/contact/index.php; form[mods][], form[search_...

CVE-2006-5079

Summary: CVE-2006-5079 is a PHP remote file inclusion vulnerability in the class.mysql.php component of Matt Humphrey’s paBugs 2.0 Beta 3 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the path_to_bt_dir parameter. The CVSSv2 base metrics suggest netw...